'Harmless' Global Adware Transforms Into an AV Killer
A benign looking update Dragon Boss pushed out in March 2025 established persistence via scheduled tasks and arranged for future payloads to be excluded from Windows Defender.
Source: https://www.darkreading.com/cyberattacks-data-breaches/harmless-global-adware-av-killer
