Projextor Abuses Cross

Gbhackers •Mayura Kathir • August 18, 2026

Threat actors behind the Projextor campaign are abusing Electron-based productivity applications to conceal malware-like capabilities behind fully functioning document converters, meal planners, recipe tools, and PDF utilities. The applications deliver their advertised features, but their shared codebase also enables runtime JavaScript execution and access to desktop-capture functionality creating a serious surveillance and post-compromise risk. -optimized […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Projextor Malware Exploits Electron Apps for Malicious Activities Projextor leverages Electron-based productivity applications to distribute malware disguised as legitimate software. Users are affected as they unknowingly download these applications, which include document converters and meal planners. The malware can execute JavaScript and capture desktop activity, posing significant surveillance risks. The campaign utilizes various distribution methods, including deceptive URLs that mimic legitimate services. Notable applications identified include Kitchen Canvas and DocConvertWizard. The malware is delivered through first-stage installers that retrieve the main malicious application. This technique highlights the growing trend of using trusted software to facilitate cyberattacks. Current analysis indicates ongoing distribution efforts through multiple websites. 3 sources 65

Extracted Entities

Projextor Abuses Cross

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

MITRE ATT&CK (2)

Platforms (1)