A phishing attack delivers a malicious LNK file targeting the healthcare industry. Upon execution, the LNK file triggers a chain of PowerShell commands, downloading and executing payloads to create a new admin account and weaken RDP security.  The HeptaX group has been actively exploiting a vulnerability in Chromium-based browsers since 2023 by deploying the ChromePass … Continue reading Hackers Downgrade Your Remote Desktop Security for Easy Access