logo

Ducktail Malware Targets HR & Marketing Pros

ID: 7072a4c4-6a4d-5089-b990-7c5aaf9a892e

STIX ID: report--7072a4c4-6a4d-5089-b990-7c5aaf9a892e

Feed Name: Cyble Blog

Threat Score
72/100

Date Published: 2026-03-18

Date Updated: 2026-07-16

...
...

DUCKTAIL is a financially motivated infostealer campaign that targets marketing and HR personnel to capture browser cookies and credentials from popular browsers, then hijacks social-media business/accounts to run fraudulent ads; the malware is delivered via ZIPs hosted on file-sharing services, implemented in .NET, and exfiltrates stolen data to Telegram bots (report includes hashes and a Dropbox payload URL as IOCs).

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.