Your computer might be secretly mining cryptocurrency for someone else, and you wouldn't even know it. That's the unsettling news from Elastic Security Labs, who recently uncovered a sneaky set of programs tied to something called REVSTEALER.
REVSTEALER is a type of "information stealer" [malware that tries to steal your personal data, like passwords or bank details] that targets Windows computers. What makes this new discovery interesting is that even after REVSTEALER itself disappears from an infected computer, it leaves behind four hidden helpers. Elastic Security Labs named these programs ProManager, WinUpdate, SoftManager, and... well, they're all pretty similar.
One of these programs, specifically named WinUpdate, has a particularly concerning trick. It switches off both Windows Update [the system that keeps your computer's security up-to-date] and Microsoft Defender [Windows' built-in antivirus software]. Think of it like a thief breaking into your house, then not only stealing your valuables but also disabling your security cameras and locking your guard dog in the kennel. With your defenses down, WinUpdate then quietly starts running a cryptocurrency miner [software that uses your computer's processing power to "mine" digital currency].
Why does this matter to you? First, your computer becomes slower because it's working hard to make money for someone else, not you. Second, and more importantly, with Windows Update and Defender disabled, your computer is left wide open to future attacks. It's like leaving your front door unlocked and all the windows open after a break-in.
This kind of post-infection clean-up, where a primary threat deletes itself but leaves behind other malicious tools, is a growing trend we're seeing in cybersecurity. It makes it harder for regular antivirus scans to spot the leftover dangers. To protect yourself, always be wary of unexpected emails or downloads, and consider using a reputable third-party antivirus solution in addition to Microsoft Defender, as these often have different ways of detecting threats.
Always keep your computer's security software and updates active to protect against hidden threats.