25,000+ Endpoints Exposed by Dragon Boss Solutions Update Domain Supply Chain Attack

### Executive summary A widespread malware campaign abused signed updater software from "Dragon Boss Solutions LLC" to silently deploy an AV-killing PowerShell payload (ClockRemoval.ps1) via MSI/PowerShell installers and WMI persistence; tens of thousands of infected systems worldwide—including critical infrastructure and academic networks—queried an unregistered update domain that could have allowed arbitrary payload delivery to all victims.