Microsoft detects malware spread through modified installers
Microsoft Threat Intelligence has identified a campaign that exploits altered Inno installers to distribute monetization-related payloads.
Microsoft Threat Intelligence is tracking a campaign based on fake downloads. The malicious operation uses trojanized Inno installers with the purpose of distributing various monetization offers to affected users.
To counter the threat and support analysis activities, Microsoft provides specific guidelines for detection and investigation. These instructions make it possible to monitor and verify the security of the entire execution of the installation session.