STOCKSTAY Backdoor Uses Malicious RDP Files and WinRAR Exploit to Target Ukraine

A newly detailed cyber-espionage campaign is using fake remote desktop files and a recently patched WinRAR flaw to plant a stealthy backdoor called STOCKSTAY on computers in Ukraine. The malware disguises itself as everyday software, including stock market trackers and calculator apps, to avoid raising suspicion while it quietly collects...

Read the full article at the source.