Winos4.0 Malware - Creation and Execution of Verifier.exe scheduled task
Attackers are distributing malware disguised as a legitimate KakaoTalk installer. The campaign leverages the popularity of KakaoTalk to trick users into downloading a trusted application but instead installs the Winos4.0 malware. Once executed, the malware operates under the guise of KakaoTalk, making it harder for users to recognize the infection. It can steal information, manipulate system processes, and download additional malicious payloads. The threat primarily targets users who obtain KakaoTalk from unofficial sources, which increases the risk of compromise.
Microsoft Sentinel (KQL)
