JAVS courtroom recording software backdoored in supply chain attack

Attackers trojanized the installer for Justice AV Solutions (JAVS) courtroom video software (version 8.3.7) by embedding a malicious fffmpeg.exe dropper linked to Rustdoor/GateDoor; the malware phones home to a C2, executes obfuscated PowerShell to disable ETW and bypass AMSI, and then downloads Python scripts to steal browser credentials. Rapid7 and JAVS advise reimaging potentially affected systems, resetting credentials, and upgrading to Viewer 8.3.9 or later to remove persistence and prevent further compromise.