NetamLoader Hid in a Patch My PC Update to Spy on Asian Governments
Kaspersky says an unknown group used NetamLoader, a near-fileless .NET loader that abuses a legitimate Patch My PC tool and hides in dllhost.exe, against a customized Windows 10 build used by governments in Asia.