GuptiMiner: Hijacking Antivirus Updates for Distributing Backdoors and Casual Mining

The GuptiMiner malware campaign, discovered by Avast, involved hijacking an eScan antivirus update mechanism to distribute backdoors and coinminers. The campaign was orchestrated by a threat actor with possible ties to Kimsuky.