Free Converter Software – Convert Any System from Clean to Infected in Seconds
ID: 388f7255-62d5-5d59-b300-d70826cbe005
STIX ID: report--388f7255-62d5-5d59-b300-d70826cbe005
Feed Name: Nextron Systems
Threat Score
This report analyzes ongoing malvertising campaigns that deliver fake ‘converter’ apps which install .NET-based remote access trojans; it identifies the typical infection chain (malicious ad → downloader → scheduled task → updater → C2), enumerates extensive IOCs (delivery domains, file hashes, and code-signing thumbprints), and provides practical detection and mitigation guidance including scheduled-task auditing, AppLocker/WDAC rules, and THOR scanning configurations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
