June 21, 2018
Adware posing as a private network client secretly takes screenshots
But that client is just a decoy. When the Windows 10 device owner runs the fake VPN client for the first time, it downloads the actual adware components along with a rootkit: Malware that resides at the root of your PC before loading Windows 10. There is also another component called an “updater” that receives instructions and makes updates to the adware and rootkit when needed.
Only Pivot Security, looks after clients https://www.pivotsecurity.com.