Advanced ‘StripedFly’ Malware With 1 Million Infections Shows Similarities to NSA-Linked Tools

Kaspersky has identified a highly sophisticated malware, StripedFly, that has been infecting devices for five years in secrecy. Masquerading as a cryptocurrency miner, it has infected over one million devices. It uses built-in Tor network tunnels for communications and trusted services for updates and delivery. It can target both Windows and Linux, carries out multiple functions and has similarities to the ThunderCrypt ransomware and the Equation malware.