Non-fungible tokens (NFT) Lure Used to Distribute BitRAT

Affected Platforms: Windows
Impacted Users: Windows users
Despite being around for many years, blockchain captured the zeitgeist of the digital movement with the advent of Bitcoin. Digital currencies, however, are not the only application of this technology. Non-fungible tokens (NFT) entered the popular lexicon in 2021. An NFT is a digital token that uses blockchain to verify the authenticity of digital content and ownership, such as art, music, collectibles, and in-video-game items. Exclusive possession of unique assets tends to drive the desire for ownership—and the price—sky-high. And predictably, online criminals are there trying to exploit this activity. FortiGuard Labs recently came across a peculiar-looking Excel spreadsheet that seemingly included NFT-related information. But instead, it downloads and installs the BitRAT malware in the background. This blog describes how this attack works.