This threat involves the abuse of FTP server banners by attackers to hide commands that deliver two new remote access trojans, E4del and PINHOLE, targeting Windows platforms. The technique uses FTP banners as a covert channel to distribute malware, which is a novel method of delivery. The malware provides remote access capabilities, allowing attackers to control infected systems. The information is sourced from a detailed article by Bleeping Computer, describing the discovery and analysis of these previously undocumented malware families.

The impact includes potential unauthorized remote access to Windows systems infected by the E4del and PINHOLE trojans. This can lead to data theft, system manipulation, or further malware deployment. The abuse of FTP banners as a delivery vector may evade some traditional detection mechanisms that do not inspect FTP banner content closely.

No official patch or vendor advisory is provided for this threat. Mitigation should focus on monitoring and controlling FTP traffic, especially inspecting FTP banners for suspicious content. Network defenders should consider restricting FTP access to trusted sources and employ endpoint detection solutions capable of identifying these new malware families. Patch status is not yet confirmed — check vendor advisories for updates.