\n<\/p>\n
eScan antivirus customers have been contaminated with malware final week after hackers compromised an official replace server, safety researchers report.<\/strong><\/p>\n The eScan provide chain assault got here to mild on January 29, when cybersecurity agency Morphisec revealed a menace bulletin warning of rogue updates tampering with customers\u2019 programs.<\/p>\n \u201cMalicious updates have been distributed by way of eScan\u2019s authentic replace infrastructure, ensuing within the deployment of multi-stage malware to enterprise and client endpoints globally,\u201d Morphisec\u2019s bulletin<\/a> reads.<\/p>\n In response to the safety agency, the updates modified customers\u2019 gadgets in order that they’d be reduce off from eScan\u2019s updates. The antivirus\u2019s regular performance was additionally altered, it says.<\/p>\n The affected customers obtained a malicious \u2018Reload.exe\u2019 file, designed to kick off a multi-stage an infection chain. The file modified the HOSTS file to dam computerized updates, established persistence by way of scheduled duties, and downloaded extra payloads.<\/p>\n \u201cComputerized remediation is subsequently not doable for compromised programs. Impacted organizations and people should proactively contact eScan to acquire the handbook replace\/patch,\u201d Morphisec says.<\/p>\n