Règles YARA avec le tag UTA0040

Detect the ICONICSTEALER malware family.

Detects the MACOS version of the ICONIC loader.

Detects the malicious library delivered in the backdoored 3CX installer.

Detects 3CX installers created in March 2023, 3CX was known to be compromised at this time.

Detection of malicious ICO files used in 3CX compromise.