DeathStalker's VileRAT Continues to Target Foreign and Crypto Exchanges

After the initial infection, DeathStalker would deliver an obfuscated JavaScript file to infected machines that would drop and schedule the execution of VileLoader, the VileRAT installer.