Malicious extensions can be hard to detect, as they attempt to install a legitimate extension after being downloaded, providing the tool the user expected. The PowerShell script used tries to run a malicious payload with admin permissions. If that fails, it tries to create another directory and copy a file before creating a malicious DLL and executing it.
Google Releases Android Update to Patch Two Actively Exploited Vulnerabilities
Google has released patches for 62 vulnerabilities, two of which have been exploited, according to its April 2025 security bulletin. The two high-level vulnerabilities are
-1744079369785-w300.jpg?w=0&resize=0,0&ssl=1 "Taking a holistic approach to medical device security")
