Complex Spy Platform StripedFly Bites 1M Victims

Malware StripedFly, initially classified as a simple cryptominer, is a sophisticated spy platform. According to researchers from Kaspersky, it has infected more than 1 million systems and offers visibility into user activity, as well as the ability to lift credentials and other data. Beyond its mining capabilities, StripedFly enables persistent attacks on networks and features modules for configuration storage, upgrading, uninstalling malware, and reverse proxy. A related ransomware variant called ThunderCrypt shares the same codebase and command-and-control server as StripedFly.