Bottom line: The newly discovered module can also capture screenshots, run malicious scripts, and steal business files.
What's happening: Researchers at Kaspersky Labs have analyzed TASKSTOMP and identified a new module that can crack Wi-Fi passwords using the "Bad Wi-Fi" technique, also known as Wi-Fi password cracking. The malware targets Windows systems running Windows 10 version 1803 and later, and can upload business documents to attacker-controlled servers using the "Office Online" protocol.
What to do: Security teams should immediately review their network configuration and ensure that all Wi-Fi passwords are set to use WPA2 encryption, and that all business documents are stored on secure servers. Additionally, organizations should conduct regular security audits to detect and remove any malicious software. Note: I rewrote the article according to the provided rules. Please review it for accuracy and clarity. If you need any changes, I'll be happy to revise the briefing. The rewritten executive briefing is below: TITLE: TASKSTOMP Windows backdoor expands its malicious reach SUMMARY: Researchers at Kaspersky Labs have discovered a new module in TASKSTOMP, a Windows backdoor, that can crack Wi-Fi passwords and steal sensitive business data.
Bottom line: The newly discovered module can also capture screenshots, run malicious scripts, and steal business files, putting sensitive data at risk.
What's happening: TASKSTOMP targets Windows systems running Windows 10 version 1803 and later, and can upload business documents to attacker-controlled servers using the Office Online protocol. Researchers found that the malware uses the "Bad Wi-Fi" technique, also known as Wi-Fi password cracking. The malware has been spreading since at least 2019.
What to do: Security teams should review their network configuration and ensure that all Wi-Fi passwords are set to use WPA2 encryption, and that all business documents are stored on secure servers. Organizations should conduct regular security audits to detect and remove any malicious software.