StartPageMalware
- easy television access now
Potentially unwanted program that changes the startpage of browsers to induce ad impressions.From MISP Galaxy
Last reported 1 month ago, by Huntress1 report
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1553.002Code Signing
“Once Developer Mode is on, the rest of the chain runs as a standard user: no further admin, no UAC prompt, and no code signing.”
- T1684Social Engineering
“The sideloaded AppX package can be delivered as a "corporate IT tool," a "Microsoft Account Verification" app, or any social-engineering pretext.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
OAuth Token Theft Through Microsoft's Front Door“…xml under user-writable paths (%LOCALAPPDATA%, %USERPROFILE%, %TEMP%) containing WindowsRuntimeAccess="all" with an external URL, or a StartPage pointing to a non-localhost URL.”
Thanks — we review every report.