Tag: domain shadowing

1 Attack Reports | 0 Vulnerabilities

Attack reports

Unmasking SocGholish: Untangling the Malware Web Behind the 'Pioneer of Fake Updates' and Its Operator

SocGholish, operated by TA569, functions as a Malware-as-a-Service vendor, employing deceptive 'fake browser update' lures to compromise systems. It leverages Traffic Distribution Systems like Parrot TDS and Keitaro TDS to filter and redirect victims. TA569 acts as an Initial Access Broker, enablin…
ransomware
lockbit
socgholish
malware-as-a-service
initial access broker
raspberry robin
mintsloader
fake updates
2025-08-08
dridex
wastedlocker
netsupportrat
traffic distribution system
domain shadowing
hades
Published: August 8, 2025
Downloadable IOCs: 33
Click here to see more Attack Reports