Hackers attack Gmail: Astaroth virus steals personal data

The Astaroth malware, available on the dark web, has received updates that hackers are distributing via the Telegram messenger. Cybersecurity experts warn that the new virus poses a serious threat to email users.

Phishing attacks on Gmail
Cybercriminals have targeted the largest email service — Gmail. They use fake login pages that look identical to the originals to steal user credentials. According to specialists, the main defence against such attacks remains an active spam filter. If it is disabled, fake emails may end up in the "Inbox" folder, and users, unaware of the trick, may enter their details.

How does Astaroth work?
Digital security expert James Knight noted that Astaroth is capable of bypassing two-factor authentication. This means that hackers can impersonate any user. The virus does not just steal passwords — it gains access to banking details, card numbers, and other confidential information.

Bypassing security mechanisms
It was previously believed that phishing attacks only worked through malicious links in emails. However, Astaroth uses fake web pages that look official but are not detected by security filters.

First attack and consequences
Attacks using Astaroth were first recorded in May of last year. During this time, criminals stole funds from victims' accounts and gained access to their personal data.

How to protect yourself?
 Do not disable Gmail spam filters;
 Carefully check links before entering data;
 Use strong passwords and two-factor authentication;
 Avoid clicking on suspicious emails.