Do Son Group-IB exposed MuddyWater using NordVPN to send phishing emails that deliver the Phoenix v4 backdoor. The malware steals credentials via a custom Chromium stealer disguised as a calculator.
FakeUpdate
Uncover the intricate web of the SmartApeSG FakeUpdate campaign and its connections to NetSupport RAT and other malicious threats.