WebDAV-as-a-Service: Uncovering the infrastructure behind Emmenhtal… – Securitricks

216.73.217.139

WebDAV-as-a-Service: Uncovering the infrastructure behind Emmenhtal loader distribution - Sekoia.io Blog

· Published 19/09/2024 19:34 · Modified 19/09/2024 20:37

Essential information

Published: 19/09/2024 19:34
Modified: 19/09/2024 20:37
Tags: 2024-09-19 clearfake darkgate dcrat emmenhtal google cloud marko polo peaklight selfau3 webdav zgrat
Related entities: 120 observables, 3 techniques (mitre), 16 malware, 5 others

Description

The Emmenhtal loader, also known as PeakLight, operates in a memory-only manner, making it difficult to detect and analyse. It is primarily used to distribute other malicious payloads, including well-known infostealers that target sensitive information.

External references