Malicious Latrodectus Downloader Picks Up Where QBot Left Off

The report describes Latrodectus, a newly identified downloader observed since late 2023 and increasingly used in phishing email campaigns by initial access brokers (notably TA577 and TA578). Latrodectus implements sandbox-evasion checks, has seen rising activity in Feb–Mar 2024, and is likely filling the operational gap left by the QBot takedown, prompting recommendations for enhanced phishing awareness and detection.