![]() Malvertisers developed the Legit AnyDesk appĪfter going through this malware, the experts came to know that the malicious campaign is dispatching all the assembled AnyDeskSetup.exe files which took off on April 21. However, in an investigation, the experts have detected a file “rexc.exe” that seems to be a renamed PowerShell binary, and here the main motive of this file is to bypass and avoid detections that are occurring. “C:\Intel\rexc.exe” -exec bypass \Intel\g.ps1 Not only this but it is also trying to launch very strong PowerShell scripts that have the command line:. ![]() Initial DetectionĪccording to the cybersecurity analysts of CrowdStrike report, the initial detection of this malware is that it is using the MITRE’s method T1036 to masquerade ( Evasion technique).Īpart from this, the malware got an executable file that is resembling to have been influenced to avoid any kind of detection. ![]() ![]() The most interesting fact of this malware is that they are using fraudulent Google ads that are penetrating the search network results pages so that the hackers can easily reach the unsuspecting users.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |