Software installers affected are mainly used for 3D modeling and graphic design, with French being the most frequent language used in the malware campaign.