Fake-download campaign delivers monetization payloads
Original title: Fake-download campaign uses trojanized installers to deliver monetization payloads
Trojanized installers distribute proxy, compute, and adware payloads to users seeking cracked software.
Microsoft Threat Intelligence identified an evolving fake-download campaign targeting users searching for cracked commercial software, free games, activators, plugins, and unofficial utilities. The campaign uses trojanized Inno Setup-style installers to distribute multiple monetization payloads during a single installation session. Confirmed branches transform devices into monetized assets via proxy routing, distributed computing platforms, or adware installation without informed consent. Organizations can reduce exposure by preventing untrusted software sources and enabling potentially unwanted application protection.
Unconfirmed: Exact number of affected users and specific payload versions not reported
- Inno-based trojanized installers used
- Multiple monetization branches delivered
- WorldProxyPool creates SYSTEM scheduled tasks
- Monetization includes proxy, compute, and adware
- Users seek cracked software
Impact: monetization of devices through proxy, compute, or adware
| Product | Affected |
|---|---|
| Microsoft Windows | — |
- 1.Prevent use of untrusted software sources
- 2.Enable potentially unwanted application protection
- 3.Monitor for unexpected software installations
From the original article
11 min read at microsoft.com
Microsoft Threat Intelligence tracks a fake-download campaign that uses trojanized Inno installers to deliver multiple monetization offers and provides detection and investigation guidance across the complete installer session. The post Fake-download campaign uses trojanized installers to deliver monetization payloads appeared first on Microsoft Security Blog.
By Microsoft Security Research and Jiacen Xu · microsoft.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.