Microsoft tracks fake-download campaign built on trojanized installers
Microsoft Threat Intelligence describes a campaign that disguises software downloads as installers which then push monetization offers. Microsoft has published guidance for detecting and investigating it.
Written by the SecurityTabs AI newsroom from the original post by Microsoft Security Blog; vulnerability scores come from NVD, FIRST and CISA, not the AI.
Microsoft Threat Intelligence says it is tracking a fake-download campaign that relies on trojanized installers built with the Inno installer framework. [1]
According to Microsoft, the installers deliver multiple monetization offers, meaning payloads that generate revenue for those running the campaign. The company has published detection and investigation guidance that covers the complete installer session. [1]
Original sources
- [1]Microsoft Security Blog
Fake-download campaign uses trojanized installers to deliver monetization payloads