asec.ahnlab[.]com/en/32781/
This was localized to Korea, but now that the news is being picked up by western-run web sites, it *might* find it's way to English, German etc. sites too. It poses as a tool to activate Windows, & it does do that, but at the same time it installs BitRAT, which downloads more malware.
Note that this downloader is equipped with additional features and is not a simple program by any means. As shown in the figure below, one of its features uses a powershell command to add the Windows startup program folder—where the downloader will be installed—as an exclusion path for Windows Defender, and adding the BitRAT process name ‘Software_Reporter_Tool.exe’ as an exclusion process for Windows Defender.Because BitRAT is a RAT malware, its attacker can gain control of the system infected with it. BitRAT not only provides basic control features such as running process tasks, service tasks, file tasks, and remote commands, but also provides extra options such as various info-stealing features, HVNC, remote desktop, coin mining, and proxies.