Security pros baited with fake Windows LDAP exploit traps

Trend Micro identified a counterfeit proof-of-concept for LDAPNightmare (CVE-2024-49113) that included a malicious 'poc.exe' which dropped a PowerShell loader that downloaded and executed an information-stealing script from Pastebin, collecting system, process, directory, and network information; the report warns researchers to treat PoCs from untrusted sources with caution and references related high-severity LDAP fixes (including CVE-2024-49112) and prior nation-state operations targeting security researchers.