A benign looking update Dragon Boss pushed out in March 2025 established persistence via scheduled tasks and arranged for future payloads to be excluded from Windows Defender.
First seen on darkreading.com
Jump to article: www.darkreading.com/cyberattacks-data-breaches/harmless-global-adware-av-killer
