Tag: manualfinder

2 Attack Reports | 0 Vulnerabilities

Attack reports

AppSuite, OneStart & ManualFinder: The Nexus of Deception

This analysis reveals connections between three seemingly distinct malicious programs: AppSuite, OneStart, and ManualFinder. The investigation uncovers shared server infrastructure and similar installation patterns, indicating that these programs are likely created by the same threat actor. OneStar…
powershell
node.js
infrastructure
appsuite
manualfinder
2025-09-16
browser-extension
cloudfront
onestart
desktopbar
browserassistant
Published: September 16, 2025
Downloadable IOCs: 0

New malware campaign discovered via ManualFinder

A global malware infection of Windows computers has been uncovered, stemming from software users installed themselves. The malware, disguised as legitimate PDF editors and manual finders, turns infected systems into residential proxies for malicious actors. The infection chain starts with deceptive…
windows
javascript
certificate abuse
residential proxy
2025-09-03
onestart browser
pdf-editor
manualfinder
trojan:win64/infostealer!msr
trojan:win32/malgent!msr
Published: September 3, 2025
Downloadable IOCs: 41
Click here to see more Attack Reports