Projextor Shows How Malware Can Hide Behind Trusted Electron Executables
Brief
Projextor is a malware campaign that turns ordinary-looking desktop tools into a doorway for hidden code.
Its operators package it inside working document converters, meal planners and recipe applications, so victims receive a program that appears useful from the first click.
The campaign relies on lookalike download sites and installers for free productivity software.
Once a user runs one, the installer retrieves an Electron-based application that can blend its harmful behavior with expected activity such as opening files, saving output and using local system resources.
Analysts at G Data identified a cluster of document converters, food planners and recipe applications that shared the same hidden framework.
G Data said in a report shared with Cyber Security News (CSN) that the apps remained functional while concealing code with far broader access than users would expect.