Fake Google Meet MSI dropping GoogleMeet.exe in Agent folder via msiexec

ills3c Intel&Coffee@Ills3C

•updated 2 days ago•1•0•2

Detects the installation of a Google Meet-named MSI package via msiexec.exe from user-writable paths or non-Google URLs, correlated with the creation of a GoogleMeet.exe binary in the Google Meet Agent directory.