thehackernews.com
NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
Kaspersky researchers have uncovered a sophisticated infection chain that targets a custom Windows 10 build used exclusively by Asian government agencies. The campaign deploys an undocumented .NET assembly‑loading framework, dubbed NetamLoader, delivered inside a Windows cabinet (CAB) archive placed in the system’s SoftwareDistribution folder. The archive contains a “.config” file that leverages AppDomainManager injection to load arbitrary .NET assemblies, effectively sideloading malicious code into legitimate processes. Four of the seven files in the archive belong to Patch My PC, an [...]