Tag: fake updaters

2 Attack Reports | 0 Vulnerabilities

Attack reports

Evasive Panda APT poisons DNS requests to deliver MgBot

The Evasive Panda APT group conducted highly-targeted campaigns from November 2022 to November 2024, employing adversary-in-the-middle attacks and DNS poisoning techniques. They developed a new loader that evades detection and uses hybrid encryption for victim-specific implants. The group utilized …
apt
mgbot
dns poisoning
fake updaters
2025-12-24
aitm attacks
hybrid encryption
multi-stage shellcode
stealthy loader
Published: December 24, 2025
Downloadable IOCs: 11

Interlock ransomware evolving under the radar

The Interlock ransomware group, active since September 2024, has shown adaptability and innovation in its tactics despite a relatively low victim count. They employ fake browser updates and the ClickFix technique for initial access, followed by a multi-stage attack chain involving PowerShell backdo…
ransomware
lumma
clickfix
double extortion
remote access trojan
2025-04-16
credential stealer
berserkstealer
interlock rat
interlock ransomware
fake updaters
powershell backdoor
Published: April 16, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports