LuckyMouse signs malicious NDISProxy driver with certificate of Chinese IT companySince March 2018 we have discovered several infections where a previously unknown Trojan was injected into the lsass.exe system process memory. This campaign was active immediately prior to Central Asian high-level meeting and we suppose that actor behind still follows regional political agenda.
Source:
LuckyMouse signs malicious NDISProxy driver with certificate of Chinese IT company
