Match Legitimate Name or Location
Named by 2 kept items in this workspace.
Search every workspace for Match Legitimate Name or Location. It matches the name as written, so it can find other things that share it.
The items that name it 2
Follow-on tooling used filenames closely resembling legitimate Windows, Microsoft Defender, security, and Phone Link applications.
Extensions adopt names and branding matching legitimate VPN providers to deceive victims
All techniques in this workspace.