Josh has worked a freelance writer for the past ten years, writing news and features focusing on the gaming, science, and tech industries. He has covered big events like E3, CES, and a slew of other smaller press events oriented around the latest consumer technology and gadgets.
March 9, 2026 2:10 pm ESTMalware has become a prevalent part of the online ecosystem. It's become so bad, in fact, that thein the past, to help avoid known vulnerabilities. As if that wasn't bad enough, we've even seen some bad actors turning to the growing AI expansion to help fuel their efforts to create new ways to expose users to malware.
However, one of the oldest tricks in the book is the old 'bait and switch.' This is where bad actors take malware and disguise it as something else, thus tricking users into downloading the malware and infecting their own systems. Unfortunately, it looks like a group of threat actors has turned to this method once more, as Microsoft has issued warnings about a new malware threat that impersonates everyday applications., the bad actors behind the attack are using highly convincing phishing emails to trick users into interacting with counterfeit PDF attachments. After opening the PDF, the users are then directed to click a button to"open with Adobe." However, instead of taking the user to the official Adobe website, it takes them to a spoofed download page instead of the document they are trying to view. From here, the system automatically downloads the infected file. Microsoft says that there are also versions of the malware system that prompt users about"out of date" programs, sending them to download infected files masquerading as Teams, Zoom, or Google Meet.What makes this malware campaign especially troubling, though, is that it goes far beyond simply masquerading as the programs that it pretends to be. Instead, Microsoft says that each of the fake software is able to successfully act like the legitimate app by using an Extended Validation certificate that has been issued to TrustConnect Software PTY LTD. This means that when installing the programs, they'll appear as"signed," which is usually a sign that something can be trusted. Once installed, Microsoft notes that the fake applications then deploy their malware, infecting the target computer with tools like Tactical RMM, ScreenConnect, and other remote monitoring or management applications. What makes this malware especially tricky, too, is the fact that the system creates a secondary copy of itself under the Program Files directory, thus reinforcing that it is an"official" application. From there, the actual malware digs into the system as a Windows service, which allows it to execute itself during system startup.. When these campaigns surface, though, it is a good reminder of just how far some of these threat actors are willing to go to score a hit on someone's machine.While the brunt of this attack appears to be mostly focused toward workers, based on Microsoft's report, all users should be aware of the issue, and if you receive something in an email that prompts you to download anything, do not open or install any of the applications that it installs. Instead, make sure to visit the official websites yourself, download the files you need, and then if the file still prompts you to download or upgrade, you probably shouldn't trust it. You can also check in directly with any coworkers or friends through other services such as text messages, direct messages, etc, if you receive any emails with strange links. While it might sound silly to approach every attachment with this kind of caution, it's one of the best ways to help ensure you never become infected with malware designed to steal your private information. You may also want to look into installing a
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Microsoft's Discord Shutdown Sparks Backlash Amidst Windows 12 AI RumorsMicrosoft's attempt to censor the term 'Microslop' on a Discord server backfired, leading to the server's closure and fueling criticism of the company's AI integration in its products. Rumors about Windows 12 focusing on AI, including a potential premium subscription tier, further add to user discontent.
Read more »
How to watch F1 Australian Grand Prix 2026 for free: Time, Apple TV livestreamIt’s a new season — with new regs, a new team and a new broadcaster.
Read more »
The Lord of the Rings’ Viggo Mortensen’s Replacement Reportedly Cast for New MovieThe new Lord of the Rings movie may have just found it's new Aragorn.
Read more »
Best Actor nominees representing New York, New Jersey roots at 2026 OscarsNew York -- it's the city that never sleeps but is sure to be wide awake on Oscar night. When it comes to the 98th Academy Awards, the Tri-State area has a lot to brag about.
Read more »
New Iranian leader expected to be named soon, Gulf neighbors face new strikes from IranIran is reportedly close to naming a new supreme leader, as the country's neighbors are increasingly caught in the cross fire of the war that's been raging now for a little more than a week.
Read more »
Spider-Man Gets Two New Comics for ‘Brand New Day’ SynergyBefore you watch 'Spider-Man: Brand New Day' on the big screen, a new pair of comics want to remind you of the film and its big players.
Read more »