← Back to Feed

PureRAT Campaign Targets Job Seekers, Abuses Foxit PDF Reader for DLL Side-loading

December 3, 2025 · Trend Micro · Severity: MEDIUM

Job seekers looking out for opportunities might instead find their personal devices compromised, as a PureRAT campaign propagated through email leverages Foxit PDF Reader for concealment and DLL side-loading for initial entry.

Key Takeaways

  • A PureRAT campaign targets job seekers through email-based propagation.
  • The campaign abuses Foxit PDF Reader for concealment and DLL side-loading for initial entry.
  • Job seekers looking for opportunities might instead find their personal devices compromised.
☕ Buy a Coffee