Skitnet Strikes: The Malware Making Ransomware Gangs Laugh All the Way to the Bank!
Ransomware gangs are raving about Skitnet, a new malware making waves since 2025. Think of it as a Swiss Army knife for hackers, with stealthy post-exploitation features. Prodaft researchers track its growing popularity in attacks like Microsoft Teams phishing. It’s cost-effective, making it a new favorite in the cybercrime toolkit.
Hot Take:
In the ever-evolving game of cyber Whac-A-Mole, ransomware gangs are now armed with an insidious new tool, Skitnet, that’s as sneaky as a ninja in a blackout. It’s the malware equivalent of a Swiss Army knife, but with far more sinister intentions. Who knew malware could be so multifunctional? Watch out, enterprises, your ‘Teams’ meetings might not be the only thing getting hijacked!
Key Points:
- Skitnet is a stealthy malware gaining popularity among ransomware gangs since early 2025.
- It uses a Rust-based loader to initiate infection, decrypting a Nim binary for further exploitation.
- Skitnet employs a DNS-based reverse shell for discreet communication with its command and control server.
- Malware capabilities include persistence, remote access tool installation, and antivirus enumeration.
- Prodaft has shared Skitnet indicators of compromise on GitHub for public awareness.
Already a member? Log in here