Intrusions involved luring targets to download a setup binary from legitimate-looking fraudulent websites that directly deploys the Oyster malware, marking a change from the previous usage of a dedicated loader for the payload.
Article Link: Malvertising campaign deploys Oyster backdoor via trojanized software installers | SC Media