The Pirate Bay Users Targeted By Russian Doll ‘PirateMatryoshka’ Malware

While P2P file sharing isn’t illegal, torrent websites turn out to be the biggest sources to download copyright-protected media. Due to a plethora of free content available there, users visit them in large numbers and often end up infecting their PCs with malware.

Along the similar lines, the researchers from Kaspersky Labs have found that a new Trojan downloader is spreading via The Pirate Bay. This malware is masquerading itself as popular software and the unsuspecting users are accidentally downloading it.

The malware is being called PirateMatryoshka, which is named after the classic Russian doll that contains smaller versions of itself. This naming is apt as PirateMatryoshka is reportedly full of tons of functionalities to make your PC defunct.

When the user ends up downloading the malicious torrent from TPB, the main installer opens a phishing page that grabs the TPB account credentials to continue the process. Further, it checks the Windows Registry to ensure that the malware has attacked the machine for the first time.

The last stage involves downloading tons of additional adware and unwanted programs that waste the users’ system resources, spy on users, and display intrusive ads.

As per the latest count, the phishing link has been clicked about 10,000 times. The malware also includes auto-clicker functionality that restricts you from canceling the installation midway.

The researchers have added that the PirateMatryoshka campaign has allowed the cybercriminals to install fraud software and adware as well as compromise the TPB accounts. “Cybercriminals are always coming up with new kinds of fraud,” they added.

Also Read: Tor’s Anti-Fingerprinting Technique ‘Letterboxing’ Coming To Firefox