Researchers studying cybersecurity have discovered a new version of the well-known malware loader Matanbuchus, which has important characteristics to increase its stealth and avoid detection.
A malware-as-a-service (MaaS) product known as Matanbuchus can serve as a conduit for ransomware and Cobalt Strike beacons, among other next-stage payloads.
The malware was first offered for rent on Russian-speaking cybercrime forums in February 2021 for $2,500, and it has since been used in ClickFix-style lures to deceive people who are browsing trustworthy but infected websites that aren’t hosting it.
Because Matanbuchus isn’t typically distributed by drive-by downloads or spam emails, it stands apart among loaders. Instead, attackers frequently utilize hands-on social engineering to deceive consumers directly. In certain instances, it facilitates the type of initial access that brokers who sell entrance to ransomware organizations read more about Hackers Leverage Microsoft Teams to Spread Matanbuchus 3.0 Malware to Targeted Firms.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.