Masquerade Updateassistant Forged Versioninfo

Arnold Chan@slaz

•updated 29 days ago•0•0•0

Detects PE binaries masquerading as Microsoft's Windows Update Assistant via forged VersionInfo metadata combined with an unsigned or invalid/unverified digital signature, associated with HVNC backdoor delivery