Ducktail Malware Targets HR & Marketing Pros
ID: 7072a4c4-6a4d-5089-b990-7c5aaf9a892e
STIX ID: report--7072a4c4-6a4d-5089-b990-7c5aaf9a892e
Feed Name: Cyble Blog
Threat Score
DUCKTAIL is a financially motivated infostealer campaign that targets marketing and HR personnel to capture browser cookies and credentials from popular browsers, then hijacks social-media business/accounts to run fraudulent ads; the malware is delivered via ZIPs hosted on file-sharing services, implemented in .NET, and exfiltrates stolen data to Telegram bots (report includes hashes and a Dropbox payload URL as IOCs).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
