NetamLoader malware targets government Windows 10 systems in Asia via .NET injection
Kaspersky described a previously undocumented .NET assembly-loading framework called NetamLoader, used against a custom Windows 10 build used by government organizations in Asia. Telemetry identified a single victim; the exact delivery method, attacker, and possible theft of sensitive information remain undetermined.
CERT24