Mltab Adware DLL Execution via Rundll32

Tim Peck@timpeck

•updated Jan 6, 2026•5•3•80

Detects the execution of the Mltab adware installer DLL, "OfficeTeam.Installer.dll", via rundll32.exe. This activity is part of a supply chain attack involving the Office Assistant software.