#scriptexecution — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #scriptexecution, aggregated by home.social.
-
Projextor: Abusing Electron in Trojanized Productivity Applications
Projextor is a malware campaign that leverages Electron-based productivity applications to deliver malicious payloads. The threat disguises itself as legitimate document converters, meal planners, and PDF management tools with working user interfaces. Distribution occurs through impersonating websites that mimic genuine services, using high-ranking search results to lure victims. Applications like Kitchen Canvas, Food Formula, DocConvertWizard, and PDFGrip contain insecure Electron configurations that enable dynamic JavaScript execution and desktop capture capabilities. The infection chain begins with NSIS, Squirrel, or Inno Setup installers that download the main Electron application. Preload scripts abuse privileged Node.js APIs with intentionally disabled security features, allowing arbitrary code execution and screen monitoring. This enables threat actors to capture sensitive information, monitor user activity, and execute remote commands while maintaining the appearance of functional productivity soft...
Pulse ID: 6a8325c63ec6c1f8d93275f6
Pulse Link: https://otx.alienvault.com/pulse/6a8325c63ec6c1f8d93275f6
Pulse Author: AlienVault
Created: 2026-08-17 15:16:22Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #ELF #InfoSec #Java #JavaScript #Malware #Mimic #Nodejs #OTX #OpenThreatExchange #PDF #RAT #ScriptExecution #Squirrel #Trojan #bot #AlienVault