DarkGate, the Swiss Army knife of malware, sees boom after rival Qbot crushed

DarkGate is a modular malware-as-a-service that has increased in use since the QBot takedown; security firms report thousands of campaigns (Proofpoint documented ~14,000) and widespread abuse by criminal groups such as TA571. The family provides credential theft, keylogging, remote access and ransomware deployment, spreads via phishing, DLL sideloading and poisoned file shares, and employs advanced evasion (encryption, obfuscation, VM/AV checks); the report includes telemetry, IOCs and recommended mitigations.