Hackers Abusing Windows Search Feature to Install Remote Access Trojans

Jul 28, 2023

A legitimate Windows search feature is being exploited by malicious actors to download arbitrary payloads from remote servers and compromise targeted systems with remote access trojans such as AsyncRAT and Remcos RAT.
The novel attack technique, per Trellix, takes advantage of the “search-ms:” URI protocol handler, which offers the ability for applications and HTML links to launch custom local

Get Free Report & Network Analysis

Please check your email for the free report.