How real software downloads can hide remote backdoors | Malwarebytes

A campaign uses a fake RustDesk download site (rustdesk[.]work) to trick users into installing legitimate RustDesk alongside the Winos4.0 backdoor malware, which operates entirely in memory and blends its network traffic with legitimate remote desktop activity.