Warning: Malware Disguised as a Security Update Installer Being Distributed

AhnLab, in collaboration with the National Cyber Security Center (NCSC) Joint Analysis and Consultation Council, has recently uncovered the attack of a hacking group that is supported by a certain government.

The discovered malware disguised itself as a security update installer and was developed using the Inno Setup software. A brief description of the software is provided below in the table.

Figure 1. Installer disguised as Security Upgrade

ahnlab analysis attack center collaboration council cyber cyber security distributed government hacking hacking group installer malware malware analysis national ncsc security security center security update software update warning