Lightworks | Crack.rar -upd-
Gamaredon Group (UAC-0010), associated with Russian-sponsored operations. Attack Vector: Spear-phishing emails delivering a weaponized RAR file. Target Payload:
The attack operates through a multi-stage process involving file extraction, malicious shortcut execution, and script-based payload delivery. It establishes persistence via scheduled tasks and registry modifications to connect to attacker-controlled C2 servers, allowing for espionage activities such as data exfiltration. National Security Archive OCR of the Document | National Security Archive LIGHTWORKS Crack.rar -UPD-
Malicious scripts (LNK, VBScript, PowerShell) for espionage. National Security Archive Malware Analysis (Infection Chain) It establishes persistence via scheduled tasks and registry
"LIGHTWORKS Crack.rar" (often labeled with "-UPD-") is identified by cybersecurity analysts as a malicious dropper associated with the Gamaredon (UAC-0010) While appearing to be a "crack" or updated
threat group. While appearing to be a "crack" or updated version of the Lightworks video editing software, it is actually used as an initial access vector for multi-stage malware deployment. National Security Archive Incident Summary Threat Actor:
