XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure
Posted on
Disguised as harmless PDF documents, LNK files trigger a PowerShell script, initiating a Rust-based injector called Freeze[.]rs and a host of malware infections.
The US administration has banned [https://www.bis.gov/press-release/commerce-department-prohibits-russian-kaspersky-software-us-customers] Kaspersky, a Russian cybersecurity…