MLTBackdoor Malware Family Fuels Ransomware Attacks

Zscaler ThreatLabz identified MLTBackdoor, a sophisticated backdoor associated with ransomware operators that uses ClickFix social engineering to deliver malicious PowerShell, employs heavy MBA and control-flow flattening obfuscation, supports Beacon Object Files for fileless capability, and maintains resilient, ECDH/AES-256-GCM encrypted C2 communications with a DGA fallback; organizations should monitor anomalous PowerShell activity and strengthen endpoint detection.