NEW CHERRYLOADER MALWARE MIMICS CHERRYTREE TO DEPLOY PRIVESC EXPLOITS

Summary from the TLDR InfoSec newsletter

Security researchers have discovered a new Golang-based malware loader called CherryLoader that mimics the icon and name of the CherryTree note-taking app to deceive users into installing it. Once installed, it drops either the JuicyPotatoNG or PrintSpoofer exploit and then runs a batch script to establish persistence. This article contains indicators of compromise.