2016-01-26 •
Sands Lab
The excerpt analyzes malware disguised as Samsung's internal messenger, but the body does not attribute the activity to a named threat actor. When executed, the malicious installer launches a decoy Remote Desktop Connection program while running a backdoo…