Do Son Zscaler exposed Matanbuchus v3.0, a MaaS downloader pivoting to ransomware. The stealthy C++ malware uses Protobufs for C2, QuickAssist for access, and time-wasting loops to bypass sandboxes.
QuickAssist
The threat actors have refined their techniques, introducing novel methods for gaining access and delivering malware, including Zbot, DarkGate