Tag: trojanized software

2 Attack Reports | 0 Vulnerabilities

Attack reports

Weaponized Words: Uyghur Language Software Hijacked to Deliver Malware

This analysis details a spearphishing campaign targeting senior members of the World Uyghur Congress (WUC) in March 2025. The attackers used a trojanized version of a legitimate Uyghur language text editor to deliver Windows-based malware for remote surveillance. While not technically advanced, the…
spearphishing
trojanized software
2025-04-28
gheyretdetector backdoor
remote surveillance
uyghureditpp trojan
digital transnational repression
uyghur
diaspora targeting
world uyghur congress
Published: April 28, 2025
Downloadable IOCs: 8

Thunderstruck! Malicious ads for RVTools lead to ThunderShell payload

A security incident involving malicious sponsored ads distributing backdoored administrative tools was detected. Users searching for RVTools were served a tampered version containing ThunderShell, a PowerShell-based remote access tool. The malicious ads, appearing in Google search results, led to a…
malvertising
powershell
icedid
google ads
c2
remote access tool
2025-04-03
thundershell
rvtools
trojanized software
Published: April 3, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports