It also attempts to inject a DLL into running instances of browsers, including Chrome, targeting Chrome's App-Bound Encryption Key to kill the internal encryption mechanisms.

Device manufacturers use “platform certificates” to verify an app’s authenticity, making them particularly dangerous in the wrong hands.