Trojan:Win32/Occamy.C

Trojan:Win32/Occamy.C penetrates usually uses email-based phishing to infiltrate an environment.

Users of systems affected by Trojan:Win32/Occamy.C will not know of its presence. Once in the environment, the threat actor can perform the following activities:

• Open a backdoor port for remote access.
• Leverage the impacted device to download additional malware from a threat actor-controlled server.
• Increase the infection’s risk level.
• Use the targeted device for click-fraud to generate revenue.
• Gather data like operating system (OS) version, browser make and version, IP address, username, and password.
• Inject ads into the browser system’s browser.

Trojan:Win32/Occamy.C adds registry entries to launch the embedded files on every Windows boot-up. Although Trojan:Win32/Occamy.C exists as a memory resident, sometimes even an anti-virus program cannot remove the trojan. The trojan be removed if the device is running in Safe Mode.