Uses obfuscation techniques to avoid detection by security software. How to Protect Yourself
Pony (also known as Fareit) is a modular malware family designed primarily to steal sensitive information from compromised machines, including:
The source code for Pony Loader 1.0 and 2.0 has been leaked online, leading to its widespread use by various threat actors. How the ".rar" Threat Works
Acts as a gatekeeper, downloading and installing additional ransomware or spyware on the infected machine.
Threat actors use RAR or ZIP archives containing Pony to hide their malicious intent.
Inside the .rar file is an executable, sometimes disguised with a fake icon, such as an Adobe Reader document.
Extracts passwords and logins from over 100+ different applications.