Microsoft Defender Experts is tracking an active malware campaign that uses counterfeit software-download websites to impersonate trusted vendors and distribute malicious installers. The campaign has targeted users looking to download popular software and has resulted in compromises across multiple organizations and industries, primarily affecting China-based operations of multinational organizations and Chinese-speaking users. Microsoft has observed victims across healthcare, manufacturing, gaming, technology, logistics, government, and education sectors.
Counterfeit installers to system compromise: Tracking a deceptive software download campaign | Microsoft Security Blog
Counterfeit installers to system compromise: Tracking a deceptive software download campaign | Microsoft Security Blog