Threats Tagged 'projextor'

Projextor is a malware campaign that abuses Electron-based productivity applications to deliver malicious payloads. It masquerades as legitimate tools such as document converters and meal planners, distributed via impersonation websites that rank highly in search results. The malware uses insecure Electron configurations allowing dynamic JavaScript execution and desktop capture. Infection starts with installers that download the main Electron app, which uses preload scripts to exploit privileged Node.js APIs with disabled security features. This enables arbitrary code execution, screen monitoring, and remote command execution while maintaining a functional user interface to avoid suspicion.