Shampoo

Shampoo is a malware campaign that was highlighted in Check Point Research's August 2023 Most Wanted Malware report. The malware, named "Shampoo," targets Chrome browser users through fake ads loaded with malicious software. Victims are tricked into running VBScript files that install harmful Chrome extensions, as part of the Shampoo ChromeLoader infection chain. The research behind this threat was backed by VirusTotal. The Shampoo malware was notably spread via a QR code discount offer on a website called "Pretty Girl Shopping." Users, like Gina, were offered a discount on a bottle of Flake Free Shampoo and led to the website upon scanning the QR code. Once there, they were presented with various high-priced items and encouraged to sign up for the Pretty Girl Shopping credit card. As they navigated the site, the malware would infect their systems. The repercussions of the Shampoo malware campaign underscore the importance of cybersecurity measures, even in seemingly innocuous areas such as online shopping. While putting locks on every shampoo dispenser may seem excessive, it serves as a metaphor for the necessary precautions needed to protect against such threats. The Shampoo case serves as a stark reminder of the potential risks associated with suspicious downloads, emails, or websites, and the importance of maintaining robust security protocols.