Tag: code-signing-abuse

1 Attack Reports | 0 Vulnerabilities

Attack reports

Potentially Unwanted Applications (PUAs) weaponized for covert delivery

A malware distribution campaign leveraging digitally signed binaries, deceptive packaging, and browser hijackers has been uncovered. The campaign centers around two malicious applications, ImageLooker.exe and Calendaromatic.exe, delivered via self-extracting 7-Zip archives. These artifacts align wi…
malvertising
seo-poisoning
CVE-2025-0411
7-zip
neutralinojs
2025-09-29
pua
imagelooker
digital-signing
trojanized-productivity-tools
code-signing-abuse
calendaromatic
browser-hijacker
Published: September 29, 2025
Linked vulnerabilities : CVE-2025-0411 (CVSS 7.0)
Downloadable IOCs: 6
Click here to see more Attack Reports