Genesis Market Malware Attack

What is the attack?The FortiGuard Lab’s EDR team recently identified malware infection exhibiting strong similarities to the previously reported Genesis Market malicious campaign that was dismantled by law enforcement in early 2023. The investigation traced some initial compromises to tools used for circumventing software licensing and counterfeit GPG MSI installers embedded with PowerShell scripts. Following the initial infection, the malware deploys a victim-specific DLL into the machine's memory. This malware targets Edge, Chrome, Brave, and Opera browsers by installing a …

attack campaign counterfeit dismantled edr embedded enforcement fortiguard genesis genesis market gpg infection investigation lab law law enforcement licensing malicious malware malware attack malware infection market msi powershell powershell scripts scripts software team tools what is