AhnLab ASEC blog (asec.ahnlab.com)
AppleSeed Disguised as Wi-Fi Router Firmware Installer Being Distributed · 2022-05-31
excerpt: On May 26th, the ASEC analysis team discovered the distribution of AppleSeed disguised as a Wi-Fi router firmware installer. Previously discovered AppleSeed strains were mainly distributed by disguising themselves as normal document or image files. The dropper malware that creates AppleSeed either used script formats such as JS (Java Script) and VBS (Visual Basic Script), […] | attribution sentence: Filename: firmware upgrade installer.exe VBS Script Disguised as PDF File Being Distributed (Kimsuky) When the installer is run, it hides its true identity by popping up a message box for installing firmware upgrade for a certain Wi-Fi router ( the firmware in Figure 2 is not related to AppleSeed ).