Tag: trojanized installer

2 Attack Reports | 0 Vulnerabilities

Attack reports

Foxit Impersonation: Fake PDF Installer Deploys VNC

Attackers are leveraging the trusted reputation of Foxit PDF Reader, used by over 650 million people, to distribute malicious installers disguised as legitimate software. Rather than exploiting vulnerabilities, threat actors impersonate the vendor through fake installers with document-themed filena…
social engineering
remote access
brand abuse
trojanized installer
2026-04-23
document decoy
foxit impersonation
ultravnc
Published: April 23, 2026
Downloadable IOCs: 7

Threat Actors Leverage SEO Poisoning and Malicious Ads to Distribute Backdoored Microsoft Teams Installers

A new campaign is distributing the Oyster (Broomstick) backdoor through trojanized Microsoft Teams installers. Threat actors are using SEO poisoning and malvertising to trick users into downloading fake installers from spoofed websites. The malicious installers deploy a persistent backdoor that ena…
malvertising
seo poisoning
persistence
dll sideloading
microsoft teams
c2 communication
oyster
broomstick
2025-10-02
oyster backdoor
trojanized installer
Published: October 2, 2025
Downloadable IOCs: 15
Click here to see more Attack Reports