Projextor Malware Exploits Electron Apps for Malicious Activities

• •Projextor disguises malware within Electron-based productivity applications.
• •Malicious applications can execute scripts and capture user activity.
• •Deceptive URLs are used to distribute the malware, mimicking legitimate services.

Projextor leverages Electron-based productivity applications to distribute malware disguised as legitimate software. Users are affected as they unknowingly download these applications, which include document converters and meal planners. The malware can execute JavaScript and capture desktop activity, posing significant surveillance risks. The campaign utilizes various distribution methods, including deceptive URLs that mimic legitimate services. Notable applications identified include Kitchen Canvas and DocConvertWizard. The malware is delivered through first-stage installers that retrieve the main malicious application. This technique highlights the growing trend of using trusted software to facilitate cyberattacks. Current analysis indicates ongoing distribution efforts through multiple websites.