XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

Disguised as harmless PDF documents, LNK files trigger a PowerShell script, initiating a Rust-based injector called Freeze[.]rs and a host of malware infections.

called critical critical infrastructure documents edrs evade files freeze host infect infections infrastructure injector lnk lnk files malware pdf powershell powershell script rat remcos remcos rat rust script trigger