"Hackers Using MSIX App Packages to Infect Windows PCs with GHOSTPULSE Malware"

A new cyberattack campaign has been distributing a novel malware loader called GHOSTPULSE via fake MSIX Windows app package files for popular software such as Google Chrome, Microsoft Edge, Brave, Grammarly, and Cisco Webex. According to Joe Desimone, researcher at Elastic Security Labs, MSIX is a Windows app package format that developers can use to package, distribute, and install their applications for Windows users. Based on the installers used as a lure, potential targets are suspected of being enticed into downloading the MSIX packages using compromised websites, Search Engine Optimization (SEO) poisoning, and malvertising. This article continues to discuss the 

THN reports "Hackers Using MSIX App Packages to Infect Windows PCs with GHOSTPULSE Malware"

Submitted by grigby1

 

 

Submitted by grigby1 CPVI on