eScan Antivirus Supply Chain Breach Delivers Signed Malware

A supply-chain compromise of MicroWorld Technologies' eScan antivirus product resulted in trojanized, digitally-signed updates distributing multi-stage malware worldwide; the infection delivered a downloader and remote-access backdoor, persisted via scheduled tasks and GUID-named registry keys, and actively blocked updates and remediation by altering hosts and registry settings, prompting immediate mitigation steps including searching for hashes, blocking C2 domains, isolating systems, and revoking the compromised code-signing certificate.