Weaponized Windows Installers Target Graphic Designers in Crypto Heist

Sep 9, 2023

Attackers execute malicious scripts through a feature of the installer called Custom Action, dropping several payloads — including the M3_Mini_Rat client stub backdoor, Ethereum mining malware PhoenixMiner, and multi-coin mining threat lolMiner.

Get Free Report & Network Analysis

Please check your email for the free report.