Trojanized Application Preying on TeamViewer Users

This report details a trojanized TeamViewer installer that installs njRAT (Bladabindi) alongside the legitimate TeamViewer binary, describing its drop/install behavior, persistence mechanisms (startup copy and Run keys), keylogging and system information collection, registry and firewall modifications, hardcoded mutex and C2, and provides hashes and a C2 URL as IOCs along with mitigation advice.