This brand new type of malware is out to target Windows machines, so watch out

siteadmin January 5, 2024

Cybersecurity researchers from Fortinet’s FortiGuard Labs have discovered a new version of the Bandook malware infecting Windows devices. This “off-the-shelf” remote access trojan, first spotted in 2007, is typically distributed through phishing emails carrying malicious PDF files. These files contain a link to a password-protected .7z archive that, when extracted, injects malware into msinfo32.exe, a legitimate information-gathering Windows binary. The Bandook malware alters the Windows Registry and communicates with a command-and-control (C2) server.