MedusaHVNC Trojan Enables Invisible Remote Control of PCs

The MedusaHVNC remote access Trojan allows attackers to create hidden virtual desktops on victims' computers, enabling them to access browsers and steal sensitive data without detection. This malware is marketed as a service through a dedicated website and Telegram channel, targeting users who may not be aware of its capabilities. It exploits legitimate Windows features to evade detection, making it a significant threat to individuals and organizations alike. The Trojan can access real browser profiles, cookies, and logged-in sessions, posing a risk to personal and corporate data. Users of Windows systems are particularly vulnerable, as the malware leverages hidden desktop functionalities. The current status indicates ongoing sales and distribution of MedusaHVNC in the cybercriminal underground.

Key Points: • MedusaHVNC allows remote control of PCs via hidden desktops, stealing sensitive data. • The Trojan is marketed as malware-as-a-service, increasing its accessibility to attackers. • Windows users are particularly at risk due to the exploitation of legitimate system features.