A ransomware group has been using legitimate employee monitoring and remote support software to infiltrate corporate systems, according to new research.
CRESCENTHARVEST uses protest lures and malicious LNK files to deploy RAT malware targeting Iran protest supporters for espionage and data theft.