Rapid7 Labs has discovered a highly evasive malware installer called CleverSoar, which targets Chinese and Vietnamese-speaking users by deploying and protecting several malicious elements including the Winos4.0 framework and the Nidhogg rootkit. The malware is distributed through a .msi installer package which is structured to terminate if a user’s language settings are not in Chinese or Vietnamese.

Top 10 Best Dynamic Application Security Testing (DAST) Platforms in 2025
Dynamic Application Security Testing (DAST) platforms have become fundamental for safeguarding web applications as digital assets and attack surfaces scale in both size and complexity.