Tag: dead drop resolver

2 Attack Reports | 0 Vulnerabilities

Attack reports

Matryoshka #3/3: Gamaredon's Gammasteel Infostealer

This analysis examines Gamaredon's (UAC-0010, Armagedon) advanced espionage operations targeting Ukrainian government, military, and critical infrastructure. The FSB-operated group deploys GammaSteel, a sophisticated stealer operating almost entirely from memory using Windows DPAPI encryption and s…
infostealer
ukraine
cyberespionage
vbscript
fsb
gammaload
gamaredon
gammasteel
gammaphish
gammaworm
2026-06-04
gammawipe
dead-drop-resolver
dpapi
usb-propagation
Published: June 4, 2026
Downloadable IOCs: 2

Not Just Annoying Ads: Adware Bundles Delivering Gh0st RAT

A sophisticated malware campaign is distributing both Gh0st Remote Access Trojan and CloverPlus adware simultaneously through obfuscated loaders. The loader drops encrypted payloads from its resource section, with one being adware and another a Gh0st RAT DLL module executed via rundll32.exe. The RA…
gh0st rat
keylogging
remote access trojan
dns hijacking
2026-04-17
adware bundle
cloverplus
dead drop resolver
registry persistence
Published: April 17, 2026
Linked vulnerabilities : CVE-2023-27350
Downloadable IOCs: 2
Click here to see more Attack Reports