Computer viruses come in many kinds, but few are more dangerous than Nullmixer, which is back with more viral load than ever. The danger of this virus is not just about what it does on its own, but it is so potentially harmful because it installs a multitude of malware files on the infected computer, including downloaders, spyware, backdoors, bankers, and other threats.
As you can see, this can lead to an escalating infection that can leave almost any data on your PC or Internet connection vulnerable.
The dangerous Nullmixer virus
This dangerous malware is a widespread threat that users may encounter if they download unlicensed software. Thus, those looking for pirated software may be in for a nasty surprise beyond the fact that it is not the program they expected.
As Kaspersky explains, “Downloading files from unreliable resources is like playing Russian roulette: you never know when it’s going to fire and what the next threat will be. Upon receiving Nullmixer, users get multiple threats at once. It is important to keep this in mind when trying to download something from an unknown site, as this threat can always be avoided by using strong, licensed security solutions.”
In addition, to try to gain more reach, cybercriminals specifically used professional SEO tools to stay at the top of search engine results. In this way, they could be easily found by searching for “cracks” and “keygens” on the Internet and target as many users as possible.
Nullmixer distributors are clearly trying to create a false sense of security: many people think that nothing bad could appear on the first page of search results, so they click through and end up installing a Trojan.
As always, we recommend installing only licensed programs and downloading from official sources. If, for some reason, you can’t buy a full license, you can look for a free alternative, use its trial version for a limited time, or wait for an offer or discount.”
Using this cover and hidden in compressed files, Nullmixer is installed on the user’s computer and acts as a so-called dropper. In other words, once it is on the infected computer, it does not stop, but from then on it begins to release more of the viral load on the victim.
the infinite contagion
So-called Trojan droppers (or just “droppers”) are tools for distributing malicious software. Its main goal is to install other malware silently or, as in the case of Nullmixer, several at once.
Among the families of threats that are spread through Nullmixer are RedLine, which searches for credit card and cryptocurrency wallet data from infected computers, as well as Disbuk, also known as Socelar. With the latter, attackers can gain access to a victim’s accounts by stealing Facebook and Amazon cookies, thus obtaining their credentials, address, and even their payment details.
Spain ranks 12th in the most affected countries, in a world top led by Brazil, India, Russia, Italy, Germany, France, Egypt, Turkey and the United States. You should have the best and most up-to-date cybersecurity or antivirus tool possible, in case you end up having such dangerous malware on your own computer.