Malware infects users via fake software downloads

A new Bumblebee malware campaign is spreading through fake websites mimicking popular open-source software, infecting users who download the malicious installers. The campaign uses typosquatting domains like zenmap[.]pro and winmtr[.]org, which rank high in search results, tricking users into downloading infected versions of Zenmap and WinMTR. These installers deliver a malicious DLL alongside the legitimate software, allowing attackers to install backdoors. This campaign also targets users seeking Hanwha WisenetViewer and Milestone XProtect. The official RVTools sites remain offline due to DDoS attacks, potentially driving users to the malicious sites.