New Attack Alert: Freeze[.]rs Injector Weaponized for XWorm Malware Attacks

Malicious actors are using a legitimate Rust-based injector called Freeze[.]rs to deploy a commodity malware called XWorm in victim environments.
The novel attack chain, detected by Fortinet FortiGuard Labs on July 13, 2023, is initiated via a phishing email containing a booby-trapped PDF file. It has also been used to introduce Remcos RAT by means of a crypter called SYK Crypter, which was

alert attack attack chain attacks called commodity malware deploy email environments file fortinet fortinet fortiguard fortinet fortiguard labs freeze injector july labs malicious malicious actors malware malware attacks novel pdf phishing rust victim