During our research into Help TDS, we called into the tech support scam they are driving victims to. In the call, the scammer directed us to download the free remote access tool UltraViewer. That sparked a side quest: what made UltraViewer the remote desktop tool of choice? Pulling on that thread exposed a broader ecosystem of abuse...
https://www.infoblox.com/blog/threat-intelligence/the-ultra-trail-from-viewer-to-mailer/
#techsupportscam #UltraViewer #UltraMailer #threatintel #rat #malware #infoblox
Infoblox BlogInvestigating Abuse of Remote Desktop and Bulk Mailing AppsHow DNS analysis linked the use of UltraViewer and UltraMailer to tech support scams, QuickBooks lookalike domains, and trojanized installers delivering njRAT.