Cybercriminals target graphic designers with GPU miners

• Cybercriminals are abusing Advanced Installer, a legitimate Windows tool used for creating software packages, to drop cryptocurrency-mining malware on infected machines. This activity has been ongoing since at least November 2021.


• The attacker uses Advanced Installer to package other legitimate software installers, such as Adobe Illustrator, Autodesk 3ds Max and SketchUp Pro, with malicious scripts and uses Advanced Installer's Custom Actions feature to make the software installers execute the malicious scripts.


• The software installers targeted in this campaign are specifically …

3ds abusing adobe adobe illustrator advanced attacker autodesk cryptocurrency cybercriminals designers gpu installer machines malware miners mining november package packages pro software target tool windows