Fake Adobe Acrobat updater domain (acrobat-updater.com) delivering KREMLIN

Ankit Mehta@Secvyn

•updated 24 days ago•2•0•4

Detects outbound network connections to 'acrobat-updater.com' involving suspicious API paths that mimic the Adobe Acrobat updater. This may indicate an attempt by an adversary to masquerade malicious command and control or data exfiltration as legitimate update traffic.