January 16, 2015 By Shane Schick 2 min read

Some cybercriminals will stop at nothing to try to infect innocent users, and the people behind the DarkComet malware may have taken cybercrime to a new low by feeding on sympathy over the recent massacre at the Paris offices of satirical newspaper Charlie Hebdo.

According to a blog post from security firm Blue Coat, the malware in question, also known as Fynloski, is embedded in a picture of an infant wearing a plastic bracelet inscribed “#JeSuisCharlie,” the hashtag coined to show solidarity with those who were killed in Charlie Hebdo’s newsroom earlier this month. Those who download the image may not realize DarkComet has infected their systems and rendered them vulnerable to sending out spam, spreading more malware or executing other forms of attack.

Of course, this type of tactic will be well known to security professionals, who have often seen consumers or enterprise employees click on links in emails or social media posts that capitalize on breaking news stories. The same thing happened shortly after the deaths of celebrities such as Michael Jackson or even natural disasters such as the 2010 earthquake in Haiti, Forbes pointed out.

Threat of DarkComet

DarkComet is by no means a new threat. As Computer Business Review reported, the malware was created by DarkCoderSC, a cybercriminal believed to be of French origin who stopped working on it nearly three years ago. However, this malware is still easy to access online at no cost, meaning it can be deployed by any number of cybercriminals.

The use of #JeSuisCharlie suggests Fynloski will be primarily spread through social media services such as Twitter and Facebook, both of which allow for the use of hashtags in status updates. If users fall for it, the costs can be high. An article in the International Business Times described how the malware, as an example of a remote administration tool, can get others to gather login credentials, monitor what users type, render a desktop inoperable, or worse.

Unfortunately, DarkComet may just be the tip of the iceberg for people living in France. The Christian Science Monitor says the country has been hit with a wave of cyberattacks against an estimated 19,000 sites. On the other hand, the #JeSuisCharlie malware strategy may take the danger well outside French borders. Even as the world joins in mourning the victims of this tragedy, it is best to remember that it’s in these periods of grieving when our defenses — psychological and otherwise — are down. And cybercriminals will waste no time in taking advantage.

Image Source: Flickr

More from

Autonomous security for cloud in AWS: Harnessing the power of AI for a secure future

3 min read - As the digital world evolves, businesses increasingly rely on cloud solutions to store data, run operations and manage applications. However, with this growth comes the challenge of ensuring that cloud environments remain secure and compliant with ever-changing regulations. This is where the idea of autonomous security for cloud (ASC) comes into play.Security and compliance aren't just technical buzzwords; they are crucial for businesses of all sizes. With data breaches and cyber threats on the rise, having systems that ensure your…

Adversarial advantage: Using nation-state threat analysis to strengthen U.S. cybersecurity

4 min read - Nation-state adversaries are changing their approach, pivoting from data destruction to prioritizing stealth and espionage. According to the Microsoft 2023 Digital Defense Report, "nation-state attackers are increasing their investments and launching more sophisticated cyberattacks to evade detection and achieve strategic priorities."These actors pose a critical threat to United States infrastructure and protected data, and compromising either resource could put citizens at risk.Thankfully, there's an upside to these malicious efforts: information. By analyzing nation-state tactics, government agencies and private enterprises are…

6 Principles of Operational Technology Cybersecurity released by joint NSA initiative

4 min read - Today’s critical infrastructure organizations rely on operational technology (OT) to help control and manage the systems and processes required to keep critical services to the public running. However, due to the highly integrated nature of OT deployments, cybersecurity has become a primary concern.On October 2, 2024, the NSA (National Security Agency) released a new CSI titled “Principles of Operational Technology Cybersecurity.” This new guide was created in collaboration with the Australian Signals Directorate’s Australian Cyber Security Centre (ASD SCSC) to…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today