CobInt Trojan

CobInt Trojan is a dangerous malicious application whose successful entrance does not promise anything pleasant. As its name suggests, malware researchers have decided to classify it as a Trojan infection after the thorough analysis they have performed. It has turned out that, generally speaking, CobInt Trojan is a malware downloader. Just like any other nasty malicious application, it enters systems stealthily, so it is not surprising that it takes time for victims to realize that they have encountered the Trojan infection. CobInt Trojan was spotted in the wild by researchers on the 2nd of August, 2018 for the first time, so we are sure that it has already caused problems to some people. If you are one of them, i.e. you have detected CobInt Trojan on the system you use, eliminating it completely is what you should do the first thing. Serious malicious applications are not always easy to erase, so we cannot promise that the CobInt Trojan removal will be a piece of cake too. Our malware analysts have already noticed that this infection might drop executable files that have completely random names, it might be quite problematic to locate and delete these malicious components. No worries; it does not mean that this infection cannot be removed.

CobInt Trojan is quite an interesting piece of malware, specialists say. The Trojan infection can be broken into several parts: an initial downloader, the main component, and a bunch of additional modules. The basic downloader downloads the main CobInt Trojan component, whereas the main component downloads the necessary modules from the C&C server. As for its functionalities, it no doubt performs only malicious activities. For example, specialists say that it is capable of taking and sending screenshots from the victim’s computer to its C&C sever. Second, it can access the names of running processes and send the entire list to the C&C server. If cyber criminals behind this threat get interested, new modules might be deployed on the affected system. Later on, new malicious applications might be installed on the system illegally. Theoretically, CobInt Trojan might perform other malicious activities on the affected system as well. Since it executes commands it receives from its C&C server, it might cause privacy-related problems in no time as well. Make sure your PC is protected against malware if you do not want to encounter CobInt Trojan; however, if it is already too late for prevention, i.e. the Trojan infection has already found a way to enter your system, erase it as soon as possible so that it could not cause trouble.

Research conducted by our experienced specialists has clearly shown that CobInt Trojan targets one particular group of users primarily. These are Russian-speaking users. A good old method is used to promote CobInt Trojan – it is distributed via emails. As has been observed by specialists, malicious emails holding CobInt Trojan are usually sent to targeted users with the following subject lines: Подозрение на мошенничество or Фрауд. Without a doubt, subject lines can be easily changed. The sender of these malicious emails promoting CobInt Trojan is SEPA Europe, so it is not surprising that so many gullible users open the document. When it is opened and macro is enabled, CobInt Trojan starts working on the affected computer right away. If your computer is connected to the Internet, you must keep a security application enabled on your PC because malicious software might find a way how to enter your system illegally. Keep in mind that a random antimalware tool you download from a torrent website might be a harmful threat itself. There is probably no need to say that such a tool will not clean a single malicious component from your system.

If you suspect that CobInt Trojan sits on your system performing malicious activities, you should check and erase unknown .doc files immediately and, on top of that, delete suspicious executables from %USERPROFILE%\Desktop, %USERPROFILE%\Downloads, and %TEMP% directories. If it happens that no malicious files can be detected, perform a system scan using a reliable antimalware tool. Believe us; there is nothing smart about keeping CobInt Trojan active – it will cause serious security-related problems.
Delete CobInt Trojan

Delete unknown .doc files downloaded/opened.
Remove all suspicious executables from %USERPROFILE%\Desktop, %USERPROFILE%\Downloads, and %TEMP%.
Empty Trash.
Scan your system with a diagnostic scanner.