Fake Ad Blocker Capable of Running Arbitrary code on Windows Systems

added article Business

2024-07-25 10:04:51 -

ESET specialists have discovered an advertising malware that is distributed under the guise of an ad blocker. The malware silently loads a kernel driver component, allowing attackers to run arbitrary code with elevated privileges on Windows hosts. The malware, dubbed HotPage (from the HotPage.exe installer of the same name), has been active since the end of 2023. The exact distribution method...

0 Comments 0 Shares 6821 Views 0 Reviews