Do Son Arctic Wolf Labs reveals Russian GRU Unit 29155 using SocGholish to deploy RomCom malware against a US firm with ties to Ukraine.
TA569
Silent Push exposes SocGholish as a MaaS platform for Initial Access Brokers. The malware, disguised as fake updates, fuels top-tier Russian ransomware groups like Evil Corp.
Explore the BurnsRAT and NetSupport RAT used in the Horns&Hooves campaign. Dive into the details of this cybercriminal operation targeting individuals and businesses