SUPPLY CHAIN COMPROMISE LEADS TO TROJANIZED INSTALLERS FOR NOTEZILLA, RECENTX, COPYWHIZ

Summary from the TLDR InfoSec newsletter

Trojanized installers for Notezilla, RecentX, and Copywhiz have been discovered distributing malware capable of stealing information and executing additional payloads. The malware observed can steal browser credentials, cryptocurrency wallet information, clipboard contents, and keystrokes. These malicious installers, belonging to a malware family known as dllFake, were distributed through the official website and have been active since early June.