Tag: maskbat

1 Attack Reports | 0 Vulnerabilities

Attack reports

New FIN7-Linked Infrastructure, PowerNet Loader, and Fake Update Attacks

Insikt Group uncovered new infrastructure linked to GrayAlpha, a threat actor associated with FIN7. They identified a custom PowerShell loader named PowerNet that deploys NetSupport RAT, and another loader called MaskBat. Three main infection vectors were discovered: fake browser updates, fake 7-Zi…
netsupport rat
infrastructure
tag-124
7-zip
fin7
fake updates
2025-06-13
powernet
maskbat
Published: June 13, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports