RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate Espionage

The Russian-speaking cybercrime group called RedCurl is leveraging a legitimate Microsoft Windows component called the Program Compatibility Assistant (PCA) to execute malicious commands.

“The Program Compatibility Assistant Service (pcalua.exe) is a Windows service designed to identify and address compatibility issues with older programs,” Trend Micro said in an analysis

address analysis assistant called compatibility corporate corporate espionage cybercrime espionage identify malicious malicious commands micro microsoft microsoft windows program redcurl russian russian-speaking cybercrime service speaking tool trend trend micro windows