Ultravnc Installer Masquerading As Svchost

Arnold Chan@slaz

•updated Sep 8, 2026•0•0•0

Detects PyInstaller-built UltraVNC installer renamed to svchost.exe and staged for deployment to the non-standard C:\Windows\Fonts\web directory