A phony proof-of-concept (PoC) code for CVE-2023-40477 delivered a payload of VenomRAT. We detail our findings, including an analysis of the malicious code.
Imagine if you clicked on a harmless-looking image, but an unknown application fired up instead…