Venom Spider Strikes Again: New Malware Duo Adds Bite to Cybercrime Arsenal
Venom Spider’s MaaS platform is serving up “more_eggs” with a side of RevC2 and Venom Loader. These new malware dishes are spicing up cybercriminal menus, using personalized payloads and sneaky tactics. Keep an eye out for these tasty threats as they expand their capabilities and leave defenders scrambling for protection.
Hot Take:
Venom Spider is back at it again, offering a buffet of malware delicacies for the cybercriminal connoisseur. RevC2 and Venom Loader are the latest dishes on the menu, served with a side of cookies and passwords. Bon appétit, hackers! But seriously, someone needs to revoke their chef’s license.
Key Points:
- Venom Spider, a notorious MaaS provider, has introduced two new malware: RevC2 and Venom Loader.
- RevC2 uses WebSockets to communicate and can steal passwords, cookies, and execute remote code.
- Venom Loader customizes payloads using the victim’s computer name for a personalized attack.
- FIN6 and Cobalt cybercriminal groups are known users of Venom Spider’s tools.
- Zscaler ThreatLabz detected these campaigns from August to October 2023.
Already a member? Log in here