BREAKING: A ransomware group is deploying a fake ChatGPT desktop app to stealthily install the PipeMagic backdoor, posing a dangerous cyber threat.
Ransomware Group Deploys Fake ChatGPT App to Install Backdoors
https://news.hamster-sys.com/ransomware-group-deploys-fake-chatgpt-app-to-install-backdoors/
Summary:
Cybercriminal group Storm-2460 is spreading a trojanized ChatGPT desktop application, which actually installs a sophisticated backdoor called PipeMagic. This modular malware can deliver dynamic payloads, escalate privileges, steal data, persist in infected systems, and connect to command-and-control servers—all via in-memory execution and encrypted named pipes. The campaign exploits a critical unpatched Windows zero-day vulnerability (CVE-2025-29824) in the Common Log File System, allowing attackers to evade detection and potentially deploy ransomware or steal sensitive information.
Tags: #Storm-2460, #PipeMagic, #ChatGPT, #malware, #ransomware, #CVE-2025-29824, #cybersecurity, #Windows, #backdoor
Ransomware Group Deploys Fake ChatGPT App to Install Backdoors
https://news.hamster-sys.com/ransomware-group-deploys-fake-chatgpt-app-to-install-backdoors/
Summary:
Cybercriminal group Storm-2460 is spreading a trojanized ChatGPT desktop application, which actually installs a sophisticated backdoor called PipeMagic. This modular malware can deliver dynamic payloads, escalate privileges, steal data, persist in infected systems, and connect to command-and-control servers—all via in-memory execution and encrypted named pipes. The campaign exploits a critical unpatched Windows zero-day vulnerability (CVE-2025-29824) in the Common Log File System, allowing attackers to evade detection and potentially deploy ransomware or steal sensitive information.
Tags: #Storm-2460, #PipeMagic, #ChatGPT, #malware, #ransomware, #CVE-2025-29824, #cybersecurity, #Windows, #backdoor
BREAKING: A ransomware group is deploying a fake ChatGPT desktop app to stealthily install the PipeMagic backdoor, posing a dangerous cyber threat.
Ransomware Group Deploys Fake ChatGPT App to Install Backdoors
https://news.hamster-sys.com/ransomware-group-deploys-fake-chatgpt-app-to-install-backdoors/
Summary:
Cybercriminal group Storm-2460 is spreading a trojanized ChatGPT desktop application, which actually installs a sophisticated backdoor called PipeMagic. This modular malware can deliver dynamic payloads, escalate privileges, steal data, persist in infected systems, and connect to command-and-control servers—all via in-memory execution and encrypted named pipes. The campaign exploits a critical unpatched Windows zero-day vulnerability (CVE-2025-29824) in the Common Log File System, allowing attackers to evade detection and potentially deploy ransomware or steal sensitive information.
Tags: #Storm-2460, #PipeMagic, #ChatGPT, #malware, #ransomware, #CVE-2025-29824, #cybersecurity, #Windows, #backdoor
