☄ In Asia, casino software developer BBIN is distributing a trojan disguised as a VPN browser through illegal online casinos
Infoblox and UN researchers uncovered A large-scale scheme to spread the trojan through Asian software developer BBIN (Baoying Group), based in the Philippines and Cambodia. Illegal iGaming operators in Southeast Asia offer players to download «Universe Browser» allegedly to bypass casino access blocks. The browser intercepts all traffic through servers in China steals data and works as a trojan with keylogger functions. «Infoblox» estimate the number of installations in the millions of users.
The Universe brazier masquerades as Google Chrome, bypasses antivirus and encrypts communication with command and control servers. BBIN serves both legitimate operators and those accused of money laundering and human trafficking. The investigation also revealed the company's ties to organized crime, including Suncity and other triads.
The browser has been in operation since 2014 and continues to be distributed through BBIN partners.