Loading malware…
6 distinct techniques documented for this family, organized by ATT&CK tactic.
T1584.005 — Compromise Infrastructure: Botnet (Resource Development)
T1588.001 — Obtain Capabilities: Malware (Resource Development)
Mid-2022 ... Used anonymising proxy services ... Mid-2023 ... Used the commercial residential proxy services NSOCKS and TrueSocks.
T1090.002 — Proxy: External Proxy (Command and Control)
“chisel-ng tunneling, proxychains-windows, Double-VPN-with-OpenVPN.”
NSOCKS/Ngioweb ... Utilise désormais un DGA pour gérer son infrastructure C2.
4 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Values are masked here and available in full in Mallory.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.