[2][3] Kraken is believed to spread primarily through social engineering, by tricking users into clicking on malicious files disguised as images.
Once executed, the Kraken malware copies itself to the victim's hard drive in a slightly altered format, allowing it to evade detection by antivirus software.
Kraken's ability to rapidly morph its codebase has allowed it to evade detection by most antivirus products.
This code obfuscation and frequent updates have made it an extremely stealthy and evasive botnet.
Once infected, the Kraken malware uses the victim's machine to send large volumes of spam advertising various scams and questionable products like high-interest loans, fake luxury goods, and gambling sites.