HDUtil

Reported Context (1)

A VMProtect-packed launcher called HDUtil runs them and can elevate them silently through a Windows RPC UAC bypass that Project Zero documented in 2019. OkoBot Uses In-App Fake Recovery Prompts to Target Ledger and Trezor Users

Malware (7)

MITRE ATT&CK (15)

Vendors (3)

Products (6)

Tools (1)

Countries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.