Using a Tainted Autodesk 3ds Max plugin, cybercriminal group infiltrated company using tainted and specially crafted plugin. Command and Control infrastructure used by group is located in South Korea, Bitdefender researchers say. Similar malware was used last month to introduce backdoor for document exfiltration. Group also had an entire toolset for spying upon its victims, including a “HdCrawler” binary, whose job is to enumerate and upload files with specific extensions to the server, and an info-stealer with extensive features.
Source: https://thehackernews.com/2020/08/autodesk-malware-attack.html