Microsoft Windows 11 help Files have Vidar Spyware

ThreatLabz describes an active Vidar infostealer campaign where attackers distribute oversized ISO files (spoofing Windows 11) and backdoored Adobe Photoshop binaries to deliver Themida-packed Vidar samples; the malware retrieves C2 addresses from attacker-controlled Telegram and Mastodon profiles, and the report includes detailed technical analysis, file hashes, malicious domains, C2 IPs, and other IOCs.