AhnLab reported a remote code execution vulnerability in MLsoft’s TCO!Stream asset-management solution, affecting versions 8.0.22.1115 and earlier. During incident response, AhnLab found attackers abusing the resident client process to execute code remotely across multiple PCs and install a backdoor. The advisory recommends updating to version 8.0.23.215 or later and lists Trojan/Win.Agent.C5356408 detection plus the MD5 e7c9bf8bf075487a2d91e0561b86d6f5 as a representative indicator.