: Financial traders, government entities, and users downloading software "cracks."

: A stealthy trojan often linked to the financial threat group "NS89".

: Ensure you are running version 6.23 or higher , which patches the spoofing vulnerability.

: Avoid opening archives from untrusted sources, especially those that appear to contain folders with the same name as files.