{"id":4511,"date":"2021-09-27T08:35:00","date_gmt":"2021-09-27T06:35:00","guid":{"rendered":"https:\/\/xopero.com\/blog\/?p=4511"},"modified":"2021-09-24T10:59:17","modified_gmt":"2021-09-24T08:59:17","slug":"new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer","status":"publish","type":"post","link":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/","title":{"rendered":"New malware &#8211; TinyTurla and Capoae \/ Fake certificate alert and dangerous TeamViewer"},"content":{"rendered":"\n<p>Welcome to&nbsp;<a href=\"https:\/\/xopero.com\/blog\/en\/category\/security-center\/\" target=\"_blank\" rel=\"noreferrer noopener\">Security Center<\/a>&nbsp;\u2013 our weekly update on the most devastating cyberattacks, high-severity vulnerabilities, and biggest data leaks \u2013 precisely selected by our editors.<\/p>\n\n\n\n<p>Don\u2019t miss it out!\u00a0<a href=\"https:\/\/xopero.com\/newsletter\/\" target=\"_blank\" rel=\"noreferrer noopener\">Sign up now<\/a>\u00a0and have it delivered to your inbox each Monday to start a week safe and sound. Additionally, you will receive a portion of the hottest company news and access to selected technical articles written by our experts with advice and tricks for more effective protection of your IT infrastructure.<\/p>\n\n\n\n<p>In the meantime, let\u2019s check what happened in the cyber-world last week.<\/p>\n\n\n\n<!--more-->\n\n\n\n<div style=\"height:25px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<a name=\"paragraph-1\"><\/a>\n\n\n<h2 class=\"wp-block-heading\" id=\"tinyturla-turla-deploys-new-malware-to-keep-a-secret-backdoor-on-victim-machines\"><strong>TinyTurla &#8211; Turla deploys new malware to keep a secret backdoor on victim machines<\/strong><\/h2>\n\n\n<p>Cisco Talos recently discovered a new backdoor used by the Russian Turla APT group which is likely used as a stealth second-chance backdoor to keep access to infected devices even if the primary malware is removed. It could also be used as a second-stage dropper to infect the system with additional malware.<\/p>\n\n\n\n<p>The adversaries install the TinyTurla backdoor as a service on the infected machine. Attackers try to hide the malicious activities by naming the service &#8222;Windows Time Service&#8221;, like the existing Windows service. The backdoor can upload and execute files or exfiltrate files from the infected system. It also contacts the command and control (C2) server via an HTTPS encrypted channel every five seconds to check if there were new commands from the operator. It looks like due to this backdoor&#8217;s limited functionality and simple coding style, it is not easy for anti-malware systems to detect it as malware. This means that the backdoor could stay undetected for months gathering intel, and data &#8211; and no one will be any the wiser.<\/p>\n\n\n\n<p><a href=\"https:\/\/blog.talosintelligence.com\/2021\/09\/tinyturla.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Source<\/a><\/p>\n\n\n\n<div style=\"height:25px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<a name=\"paragraph-2\"><\/a>\n\n\n<h2 class=\"wp-block-heading\" id=\"hacked-sites-push-teamviewer-using-fake-expired-certificate-alert\"><strong>Hacked sites push TeamViewer using fake expired certificate alert<\/strong><\/h2>\n\n\n<p>Threat actors are compromising Windows IIS servers to add expired certificate notification pages that prompt visitors to download a malicious fake installer. The message shown on the malicious certificate expiration error pages reads: &#8222;Detected a potential security risk and has not extended the transition to [sitename]. Updating a security certificate may allow this connection to succeed. NET::ERR_CERT_OUT_OF_DATE&#8221;.&nbsp;<\/p>\n\n\n\n<p>The method used to breach devices is not yet known. But let\u2019s face it \u2013 many admins struggle with patching their systems on time. If it is the case \u2013 the payload dropped on infected systems is TVRAT (aka TVSPY, TeamSpy, TeamViewerENT, or Team Viewer RAT). Once deployed on an infected device, the malware will silently install and launch an instance of the TeamViewer remote control software. Then after being launched, the TeamViewer server will reach out to a command-and-control (C2) server to let the attackers know they can remotely take complete control of the newly compromised computer.<\/p>\n\n\n\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/hacked-sites-push-teamviewer-using-fake-expired-certificate-alert\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Source<\/a><\/p>\n\n\n\n<div style=\"height:25px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<a name=\"paragraph-3\"><\/a>\n\n\n<h2 class=\"wp-block-heading\" id=\"new-capoae-malware-infiltrates-wordpress-sites-and-installs-backdoored-plugin\"><strong>New Capoae malware infiltrates WordPress sites and installs backdoored plugin<\/strong><\/h2>\n\n\n<p>Capoae malware uses multiple vulnerabilities and tactics to get a foothold on as many machines as possible, Malware is said to be delivered to the hosts via a backdoored addition to a WordPress plugin called &#8222;download-monitor,&#8221; which gets installed after successfully brute-forcing WordPress admin credentials. <\/p>\n\n\n\n<p>This new threat also takes advantage of exploits for multiple remote code execution flaws in Oracle WebLogic Server (CVE-2020-14882), NoneCms (CVE-2018-20062), and Jenkins (CVE-2019-1003029 and CVE-2019-1003030) to brute force a way into systems running SSH and ultimately launch the XMRig mining software. What&#8217;s more, the attack chain stands out for its persistence tricks, which includes choosing a legitimate-looking system path on the disk where system binaries are likely to be found as well as generating a random six-character filename that&#8217;s then subsequently used to copy itself into the new location on the system before deleting the malware upon execution. Word of advice? Don&#8217;t use weak or default credentials\u2026 or be ready to pay the price for keeping messy security measures.<\/p>\n\n\n\n<p><a href=\"https:\/\/thehackernews.com\/2021\/09\/new-capoae-malware-infiltrates.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Source\u00a0<\/a><\/p>\n\n\n\n<div style=\"height:25px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<a name=\"paragraph-4\"><\/a>\n\n\n<h2 class=\"wp-block-heading\" id=\"more-it-security-mustreads\">More IT security must-reads<\/h2>\n\n\n<ol class=\"wp-block-list\"><li>How to fix the Windows 0x0000011b network printing error (<a href=\"https:\/\/www.bleepingcomputer.com\/news\/microsoft\/how-to-fix-the-windows-0x0000011b-network-printing-error\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Bleeping Computer<\/a>)<\/li><li>Cring Ransomware Gang Exploits 11-Year-Old ColdFusion Bug (<a href=\"https:\/\/thehackernews.com\/2021\/09\/cring-ransomware-gang-exploits-11-year.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">The Hacker News<\/a>)<\/li><li>New Mac malware masquerades as iTerm2, Remote Desktop and other apps (<a href=\"https:\/\/blog.malwarebytes.com\/malwarebytes-news\/2021\/09\/new-mac-malware-masquerades-as-iterm2-remote-desktop-and-other-apps\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Malwarebytes Labs<\/a>)<\/li><li>iOS 15 lets you spy on apps that might be spying on you (<a href=\"https:\/\/www.zdnet.com\/article\/ios-15-lets-you-spy-on-apps-that-might-be-spying-on-you\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">ZDNet<\/a>)<\/li><li>Nagios XI vulnerabilities open enterprise IT infrastructure to attack (<a href=\"https:\/\/www.helpnetsecurity.com\/2021\/09\/23\/nagios-xi-vulnerabilities\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Help Net Security<\/a>)<\/li><li>Why You Should Consider QEMU Live Patching (<a href=\"https:\/\/thehackernews.com\/2021\/09\/why-you-should-consider-qemu-live.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">The Hacker News<\/a>)<\/li><li>Large-Scale Phishing-as-a-Service Operation Exposed (<a href=\"https:\/\/threatpost.com\/phishing-as-a-service-exposed\/174932\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Threat Post<\/a>)<\/li><li>Urgent Apple iOS and macOS Updates Released to Fix Actively Exploited Zero-Days (<a href=\"https:\/\/thehackernews.com\/2021\/09\/urgent-apple-ios-and-macos-updates.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">ZDNet<\/a>)<\/li><li>100M IoT Devices Exposed By Zero-Day Bug (<a href=\"https:\/\/threatpost.com\/100m-iot-devices-zero-day-bug\/174963\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Threat Post<\/a>)<\/li><li>FamousSparrow APT group used ProxyLogon exploits in attacks on hotels worldwide (<a href=\"https:\/\/securityaffairs.co\/wordpress\/122525\/apt\/famoussparrow-apt-target-hotels.html\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Security Affairs<\/a>)<\/li><\/ol>\n\n\n","protected":false},"excerpt":{"rendered":"<p>Welcome to&nbsp;Security Center&nbsp;\u2013 our weekly update on the most devastating cyberattacks, high-severity vulnerabilities, and biggest data leaks \u2013 precisely selected by our editors. Don\u2019t miss it out!\u00a0Sign up now\u00a0and have it delivered to your inbox each Monday to start a week safe and sound. Additionally, you will receive a portion of the hottest company news and access to selected technical articles written by our experts with advice and tricks for more effective protection of your IT infrastructure. In the meantime, let\u2019s check what happened in the cyber-world last week.<\/p>\n","protected":false},"author":1,"featured_media":2447,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[470],"tags":[],"class_list":["post-4511","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersec-news","post--single"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>New malware - TinyTurla and Capoae \/ Fake certificate alert and dangerous TeamViewer - Xopero Blog<\/title>\n<meta name=\"description\" content=\"New malware - TinyTurla and Capoae \/ Fake certificate alert and dangerous TeamViewer \/ The lastest blog posts about VMware, GitHub, M365\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/\" \/>\n<meta property=\"og:locale\" content=\"pl_PL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New malware - TinyTurla and Capoae \/ Fake certificate alert and dangerous TeamViewer - Xopero Blog\" \/>\n<meta property=\"og:description\" content=\"New malware - TinyTurla and Capoae \/ Fake certificate alert and dangerous TeamViewer \/ The lastest blog posts about VMware, GitHub, M365\" \/>\n<meta property=\"og:url\" content=\"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/\" \/>\n<meta property=\"og:site_name\" content=\"Xopero Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/XoperoSoftware\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-27T06:35:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/xopero.com\/blog\/wp-content\/uploads\/2020\/04\/security-center-en.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1843\" \/>\n\t<meta property=\"og:image:height\" content=\"481\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"xopero_blogger\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@xoperobackup\" \/>\n<meta name=\"twitter:site\" content=\"@xoperobackup\" \/>\n<meta name=\"twitter:label1\" content=\"Napisane przez\" \/>\n\t<meta name=\"twitter:data1\" content=\"xopero_blogger\" \/>\n\t<meta name=\"twitter:label2\" content=\"Szacowany czas czytania\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minuty\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/en\\\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/en\\\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\\\/\"},\"author\":{\"name\":\"xopero_blogger\",\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/#\\\/schema\\\/person\\\/cab3d3cda6e8a1aecfa8abea8827b17c\"},\"headline\":\"New malware &#8211; TinyTurla and Capoae \\\/ Fake certificate alert and dangerous TeamViewer\",\"datePublished\":\"2021-09-27T06:35:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/en\\\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\\\/\"},\"wordCount\":760,\"publisher\":{\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/en\\\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/xopero.com\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/security-center-en.png\",\"articleSection\":[\"Cybersec news\"],\"inLanguage\":\"pl-PL\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/en\\\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\\\/\",\"url\":\"https:\\\/\\\/xopero.com\\\/blog\\\/en\\\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\\\/\",\"name\":\"New malware - TinyTurla and Capoae \\\/ Fake certificate alert and dangerous TeamViewer - Xopero Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/en\\\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/en\\\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/xopero.com\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/security-center-en.png\",\"datePublished\":\"2021-09-27T06:35:00+00:00\",\"description\":\"New malware - TinyTurla and Capoae \\\/ Fake certificate alert and dangerous TeamViewer \\\/ The lastest blog posts about VMware, GitHub, M365\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/en\\\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\\\/#breadcrumb\"},\"inLanguage\":\"pl-PL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/xopero.com\\\/blog\\\/en\\\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/en\\\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\\\/#primaryimage\",\"url\":\"https:\\\/\\\/xopero.com\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/security-center-en.png\",\"contentUrl\":\"https:\\\/\\\/xopero.com\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/security-center-en.png\",\"width\":1843,\"height\":481},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/en\\\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Strona g\u0142\u00f3wna\",\"item\":\"https:\\\/\\\/xopero.com\\\/blog\\\/pl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"New malware &#8211; TinyTurla and Capoae \\\/ Fake certificate alert and dangerous TeamViewer\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/xopero.com\\\/blog\\\/\",\"name\":\"Xopero Blog\",\"description\":\"Backup &amp; Recovery\",\"publisher\":{\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/xopero.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pl-PL\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/#organization\",\"name\":\"Xopero Software\",\"url\":\"https:\\\/\\\/xopero.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/xopero.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/xopero-niebieskie.png\",\"contentUrl\":\"https:\\\/\\\/xopero.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/xopero-niebieskie.png\",\"width\":500,\"height\":132,\"caption\":\"Xopero Software\"},\"image\":{\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/XoperoSoftware\\\/\",\"https:\\\/\\\/x.com\\\/xoperobackup\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/opero-sp-z-o-o-\\\/?viewAsMember=true\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCRPWyeo1apjSgkDW3hZpB9g?reload=9\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/xopero.com\\\/blog\\\/#\\\/schema\\\/person\\\/cab3d3cda6e8a1aecfa8abea8827b17c\",\"name\":\"xopero_blogger\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/49b4a2bbd1b6df951fc556f7478f5fb20bb41aeebf08473e459b28c5da9947f7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/49b4a2bbd1b6df951fc556f7478f5fb20bb41aeebf08473e459b28c5da9947f7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/49b4a2bbd1b6df951fc556f7478f5fb20bb41aeebf08473e459b28c5da9947f7?s=96&d=mm&r=g\",\"caption\":\"xopero_blogger\"},\"sameAs\":[\"https:\\\/\\\/xopero.com\"],\"url\":\"https:\\\/\\\/xopero.com\\\/blog\\\/author\\\/xopero_blogger\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"New malware - TinyTurla and Capoae \/ Fake certificate alert and dangerous TeamViewer - Xopero Blog","description":"New malware - TinyTurla and Capoae \/ Fake certificate alert and dangerous TeamViewer \/ The lastest blog posts about VMware, GitHub, M365","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/","og_locale":"pl_PL","og_type":"article","og_title":"New malware - TinyTurla and Capoae \/ Fake certificate alert and dangerous TeamViewer - Xopero Blog","og_description":"New malware - TinyTurla and Capoae \/ Fake certificate alert and dangerous TeamViewer \/ The lastest blog posts about VMware, GitHub, M365","og_url":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/","og_site_name":"Xopero Blog","article_publisher":"https:\/\/www.facebook.com\/XoperoSoftware\/","article_published_time":"2021-09-27T06:35:00+00:00","og_image":[{"width":1843,"height":481,"url":"https:\/\/xopero.com\/blog\/wp-content\/uploads\/2020\/04\/security-center-en.png","type":"image\/png"}],"author":"xopero_blogger","twitter_card":"summary_large_image","twitter_creator":"@xoperobackup","twitter_site":"@xoperobackup","twitter_misc":{"Napisane przez":"xopero_blogger","Szacowany czas czytania":"4 minuty"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/#article","isPartOf":{"@id":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/"},"author":{"name":"xopero_blogger","@id":"https:\/\/xopero.com\/blog\/#\/schema\/person\/cab3d3cda6e8a1aecfa8abea8827b17c"},"headline":"New malware &#8211; TinyTurla and Capoae \/ Fake certificate alert and dangerous TeamViewer","datePublished":"2021-09-27T06:35:00+00:00","mainEntityOfPage":{"@id":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/"},"wordCount":760,"publisher":{"@id":"https:\/\/xopero.com\/blog\/#organization"},"image":{"@id":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/#primaryimage"},"thumbnailUrl":"https:\/\/xopero.com\/blog\/wp-content\/uploads\/2020\/04\/security-center-en.png","articleSection":["Cybersec news"],"inLanguage":"pl-PL"},{"@type":"WebPage","@id":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/","url":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/","name":"New malware - TinyTurla and Capoae \/ Fake certificate alert and dangerous TeamViewer - Xopero Blog","isPartOf":{"@id":"https:\/\/xopero.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/#primaryimage"},"image":{"@id":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/#primaryimage"},"thumbnailUrl":"https:\/\/xopero.com\/blog\/wp-content\/uploads\/2020\/04\/security-center-en.png","datePublished":"2021-09-27T06:35:00+00:00","description":"New malware - TinyTurla and Capoae \/ Fake certificate alert and dangerous TeamViewer \/ The lastest blog posts about VMware, GitHub, M365","breadcrumb":{"@id":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/#breadcrumb"},"inLanguage":"pl-PL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/"]}]},{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/#primaryimage","url":"https:\/\/xopero.com\/blog\/wp-content\/uploads\/2020\/04\/security-center-en.png","contentUrl":"https:\/\/xopero.com\/blog\/wp-content\/uploads\/2020\/04\/security-center-en.png","width":1843,"height":481},{"@type":"BreadcrumbList","@id":"https:\/\/xopero.com\/blog\/en\/new-malware-tinyturla-and-capoae-fake-certificate-alert-and-dangerous-teamviewer\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Strona g\u0142\u00f3wna","item":"https:\/\/xopero.com\/blog\/pl\/"},{"@type":"ListItem","position":2,"name":"New malware &#8211; TinyTurla and Capoae \/ Fake certificate alert and dangerous TeamViewer"}]},{"@type":"WebSite","@id":"https:\/\/xopero.com\/blog\/#website","url":"https:\/\/xopero.com\/blog\/","name":"Xopero Blog","description":"Backup &amp; Recovery","publisher":{"@id":"https:\/\/xopero.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/xopero.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pl-PL"},{"@type":"Organization","@id":"https:\/\/xopero.com\/blog\/#organization","name":"Xopero Software","url":"https:\/\/xopero.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/xopero.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/xopero.com\/blog\/wp-content\/uploads\/2019\/03\/xopero-niebieskie.png","contentUrl":"https:\/\/xopero.com\/blog\/wp-content\/uploads\/2019\/03\/xopero-niebieskie.png","width":500,"height":132,"caption":"Xopero Software"},"image":{"@id":"https:\/\/xopero.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/XoperoSoftware\/","https:\/\/x.com\/xoperobackup","https:\/\/www.linkedin.com\/company\/opero-sp-z-o-o-\/?viewAsMember=true","https:\/\/www.youtube.com\/channel\/UCRPWyeo1apjSgkDW3hZpB9g?reload=9"]},{"@type":"Person","@id":"https:\/\/xopero.com\/blog\/#\/schema\/person\/cab3d3cda6e8a1aecfa8abea8827b17c","name":"xopero_blogger","image":{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/secure.gravatar.com\/avatar\/49b4a2bbd1b6df951fc556f7478f5fb20bb41aeebf08473e459b28c5da9947f7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/49b4a2bbd1b6df951fc556f7478f5fb20bb41aeebf08473e459b28c5da9947f7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/49b4a2bbd1b6df951fc556f7478f5fb20bb41aeebf08473e459b28c5da9947f7?s=96&d=mm&r=g","caption":"xopero_blogger"},"sameAs":["https:\/\/xopero.com"],"url":"https:\/\/xopero.com\/blog\/author\/xopero_blogger\/"}]}},"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/xopero.com\/blog\/wp-json\/wp\/v2\/posts\/4511","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xopero.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xopero.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xopero.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/xopero.com\/blog\/wp-json\/wp\/v2\/comments?post=4511"}],"version-history":[{"count":2,"href":"https:\/\/xopero.com\/blog\/wp-json\/wp\/v2\/posts\/4511\/revisions"}],"predecessor-version":[{"id":4513,"href":"https:\/\/xopero.com\/blog\/wp-json\/wp\/v2\/posts\/4511\/revisions\/4513"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xopero.com\/blog\/wp-json\/wp\/v2\/media\/2447"}],"wp:attachment":[{"href":"https:\/\/xopero.com\/blog\/wp-json\/wp\/v2\/media?parent=4511"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xopero.com\/blog\/wp-json\/wp\/v2\/categories?post=4511"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xopero.com\/blog\/wp-json\/wp\/v2\/tags?post=4511"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}