New Bandook RAT Variant Resurfaces, Targeting Windows Machines

**Bandook RAT campaign (Oct 2023 observed)** — Fortinet FortiGuard Labs observed a phishing-based distribution of a new Bandook variant delivered via a PDF that links to a password-protected .7z archive; after extraction the malware injects into msinfo32.exe, establishes registry persistence, connects to C2 servers for additional payloads and instructions, and conducts file manipulation, registry changes, information theft, and remote control activities.