Shadow Vector targets Colombian users via privilege escalation and court-themed SVG decoys

Shadow Vector is an active, regionally focused malware campaign targeting users in Colombia via malicious SVG attachments and public-hosted stagers; it delivers multistage payloads (AsyncRAT, RemcosRAT and memory-resident .NET loaders) using DLL side-loading, vulnerable kernel drivers for escalation, UAC bypasses, process injection and in-memory execution, enabling credential theft, keylogging and full remote access while leaving minimal disk artifacts.