eScan Supply Chain Attack - Malicious reload.exe with Fake Signature

Detects execution or presence of a maliciously replaced eScan component reload.exe distributed via a compromised update server. The malicious binary uses an invalid fake digital signature and replaces the legitimate eScan executable.

Sigma