SolarMarker Infections Are On The Rise

An unidentified threat actor targeted multiple industries including insurance manufacturing software construction real estate utilities and legal sectors. They utilized Inno Setup and PS2EXE tools to create malicious payloads employing a PowerShell script to corrupt PDF files leading to errors upon opening. The malware incorporated defensive evasion techniques by including junk instructions. Following successful compromises secondary malicious payloads such as info-stealers and hVNC were loaded onto the compromised systems.