AppSuite, OneStart & ManualFinder: The Nexus of Deception
Summary
The article investigates links between OneStart, AppSuite, and ManualFinder and concludes that they share the same malicious actor and infrastructure. It shows how the installer, PowerShell scripts, and hosted update endpoints connect the campaigns. The analysis also traces older installers and related brands such as SecureBrowser, DesktopBar, and BrowserAssistant to the same distribution network. The piece argues that the group has reused infrastructure and marketing themes for years to spread malware disguised as utility or consumer software.
Classifications
industries
No industries detected
applications
Data Management
AskAI Classifications
Labels
Cybersecurity
Managed Detection and Response
Software Products
Linked Companies
Expel, Inc.
$50M to $100M