More_eggs MaaS Expands Operations with RevC2 Backdoor and Venom Loader
Two new malware families have been connected to the threat actors responsible for the More_eggs malware, suggesting that its malware-as-a-service (MaaS) business model has expanded.
VenomLNK, a standard tool that acts as an initial access vector for the deployment of follow-on payloads, is used to distribute the loader nicknamed Venom Loader and a new information-stealing backdoor called RevC2.
"RevC2 communicates with its command-and-control (C2) server via WebSockets. The malware can proxy network traffic, harvest passwords and cookies, and allow remote code execution (RCE) read more about More_eggs MaaS Expands Operations with RevC2 Backdoor and Venom Loader
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage o...