#adobereader — Public Fediverse posts

Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence

Two sophisticated phishing campaigns employed browser-in-the-browser (BiTB) techniques to deceive victims into installing rogue ScreenConnect remote management tools. Attackers sent phishing messages with malicious links redirecting targets to fake Adobe Reader update pages. The BiTB technique created convincing fake browser windows within webpages, displaying legitimate-looking Adobe URLs to bypass user awareness training. Victims were tricked into downloading ScreenConnect installers disguised as Adobe software updates. Each incident resulted in deployment of multiple rogue ScreenConnect instances for redundant persistence, followed by execution of defense-evasion binaries (HideCursor.exe and HideUL.exe) designed to hide attacker activities. The attacks established service-based persistence through Windows services, enabling continued remote access. Both campaigns were intercepted before further damage occurred, demonstrating how threat actors combine social engineering throughout the entire attack chain...

Pulse ID: 6aa181782eb83db70c28a2a7
Pulse Link: https://otx.alienvault.com/pulse/6aa181782eb83db70c28a2a7
Pulse Author: AlienVault
Created: 2026-09-09 15:55:36

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Adobe #AdobeReader #Browser #CyberSecurity #FakeBrowser #InfoSec #OTX #OpenThreatExchange #Phishing #RAT #RCE #ScreenConnect #SocialEngineering #Windows #bot #AlienVault

Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence

Two sophisticated phishing campaigns employed browser-in-the-browser (BiTB) techniques to deceive victims into installing rogue ScreenConnect remote management tools. Attackers sent phishing messages with malicious links redirecting targets to fake Adobe Reader update pages. The BiTB technique created convincing fake browser windows within webpages, displaying legitimate-looking Adobe URLs to bypass user awareness training. Victims were tricked into downloading ScreenConnect installers disguised as Adobe software updates. Each incident resulted in deployment of multiple rogue ScreenConnect instances for redundant persistence, followed by execution of defense-evasion binaries (HideCursor.exe and HideUL.exe) designed to hide attacker activities. The attacks established service-based persistence through Windows services, enabling continued remote access. Both campaigns were intercepted before further damage occurred, demonstrating how threat actors combine social engineering throughout the entire attack chain...

Pulse ID: 6aa181782eb83db70c28a2a7
Pulse Link: https://otx.alienvault.com/pulse/6aa181782eb83db70c28a2a7
Pulse Author: AlienVault
Created: 2026-09-09 15:55:36

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Adobe #AdobeReader #Browser #CyberSecurity #FakeBrowser #InfoSec #OTX #OpenThreatExchange #Phishing #RAT #RCE #ScreenConnect #SocialEngineering #Windows #bot #AlienVault

Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence

Two sophisticated phishing campaigns employed browser-in-the-browser (BiTB) techniques to deceive victims into installing rogue ScreenConnect remote management tools. Attackers sent phishing messages with malicious links redirecting targets to fake Adobe Reader update pages. The BiTB technique created convincing fake browser windows within webpages, displaying legitimate-looking Adobe URLs to bypass user awareness training. Victims were tricked into downloading ScreenConnect installers disguised as Adobe software updates. Each incident resulted in deployment of multiple rogue ScreenConnect instances for redundant persistence, followed by execution of defense-evasion binaries (HideCursor.exe and HideUL.exe) designed to hide attacker activities. The attacks established service-based persistence through Windows services, enabling continued remote access. Both campaigns were intercepted before further damage occurred, demonstrating how threat actors combine social engineering throughout the entire attack chain...

Pulse ID: 6aa181782eb83db70c28a2a7
Pulse Link: https://otx.alienvault.com/pulse/6aa181782eb83db70c28a2a7
Pulse Author: AlienVault
Created: 2026-09-09 15:55:36

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Adobe #AdobeReader #Browser #CyberSecurity #FakeBrowser #InfoSec #OTX #OpenThreatExchange #Phishing #RAT #RCE #ScreenConnect #SocialEngineering #Windows #bot #AlienVault

Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence

Two sophisticated phishing campaigns employed browser-in-the-browser (BiTB) techniques to deceive victims into installing rogue ScreenConnect remote management tools. Attackers sent phishing messages with malicious links redirecting targets to fake Adobe Reader update pages. The BiTB technique created convincing fake browser windows within webpages, displaying legitimate-looking Adobe URLs to bypass user awareness training. Victims were tricked into downloading ScreenConnect installers disguised as Adobe software updates. Each incident resulted in deployment of multiple rogue ScreenConnect instances for redundant persistence, followed by execution of defense-evasion binaries (HideCursor.exe and HideUL.exe) designed to hide attacker activities. The attacks established service-based persistence through Windows services, enabling continued remote access. Both campaigns were intercepted before further damage occurred, demonstrating how threat actors combine social engineering throughout the entire attack chain...

Pulse ID: 6aa181782eb83db70c28a2a7
Pulse Link: https://otx.alienvault.com/pulse/6aa181782eb83db70c28a2a7
Pulse Author: AlienVault
Created: 2026-09-09 15:55:36

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Adobe #AdobeReader #Browser #CyberSecurity #FakeBrowser #InfoSec #OTX #OpenThreatExchange #Phishing #RAT #RCE #ScreenConnect #SocialEngineering #Windows #bot #AlienVault

Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence

Two sophisticated phishing campaigns employed browser-in-the-browser (BiTB) techniques to deceive victims into installing rogue ScreenConnect remote management tools. Attackers sent phishing messages with malicious links redirecting targets to fake Adobe Reader update pages. The BiTB technique created convincing fake browser windows within webpages, displaying legitimate-looking Adobe URLs to bypass user awareness training. Victims were tricked into downloading ScreenConnect installers disguised as Adobe software updates. Each incident resulted in deployment of multiple rogue ScreenConnect instances for redundant persistence, followed by execution of defense-evasion binaries (HideCursor.exe and HideUL.exe) designed to hide attacker activities. The attacks established service-based persistence through Windows services, enabling continued remote access. Both campaigns were intercepted before further damage occurred, demonstrating how threat actors combine social engineering throughout the entire attack chain...

Pulse ID: 6aa181782eb83db70c28a2a7
Pulse Link: https://otx.alienvault.com/pulse/6aa181782eb83db70c28a2a7
Pulse Author: AlienVault
Created: 2026-09-09 15:55:36

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Adobe #AdobeReader #Browser #CyberSecurity #FakeBrowser #InfoSec #OTX #OpenThreatExchange #Phishing #RAT #RCE #ScreenConnect #SocialEngineering #Windows #bot #AlienVault

Got an old #Samsung Galaxy Tab S3 #tablet I was gifted by a relative a few years back (he upgraded to a newer one).

I use it mostly to read #PDF documents of scanned #books about #oldtimers , #mechanic work and #electronics (so these are quite big PDF files).

Normal #AdobeReader is laggy on this old device, and I don't need the #AI bullshit bundled with it.

Can anyone suggest a better PDF reader for Android with 0 ads, decent privacy and good performance?

Patch Tuesday, April 2026 Edition

https://krebsonsecurity.com/2026/04/patch-tuesday-april-2026-edition/

#PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable