DarkGate Malware: Persistent Threat in Active Distribution

Summary:

 In a recent Darkgate malware campaign targets users with fake QuickBooks invoices in PDFs via compromised email accounts. Clicking the link to “view” the invoice installs malicious software through a JAR file. This downloaded JAR file then infects the system further by downloading and extracting a ZIP archive likely containing additional malware.

Threat Level – Amber | Attack Report

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.