New malware going around that uses legitimate software to do its damage.
The setup file for the malware is 200MB, so a lot of scanners on virustotal don't detect it. The setup installs a DLL through dynamic linking that works like a backdoor.
My advice to SAP users. Disable the option in SAP to trust based on digital signature. Not name & thumbprint, just turn that setting "trust based on digital signature" off. and keep SAP in silent mode lockdown when you don't plan on installing anything, when you want to install something, switch to interactive mode and get the second opinion for every setup file.
