Fake download campaign uses trojanised installers to push monetisation software
MALWAREredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Microsoft Threat Intelligence has tracked a campaign that uses trojanised Inno Setup-style installers, distributed as fake downloads for cracked software, games, activators and utilities. A single installation can silently deploy several monetisation payloads, including proxy-network software, compute-sharing software and adware-style utilities. WorldProxyPool also creates recurring SYSTEM scheduled tasks for persistence.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Block the use of untrusted software sources, such as cracked software and activator sites.
- Enable potentially unwanted application protection.
- Monitor for unexpected software installations and persistence mechanisms such as scheduled tasks.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Microsoft Security Blog