Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

Recorded Future's Insikt Group reports that the Golden Chickens (aka Venom Spider / TAG-195) MaaS ecosystem has resurfaced with four new malware families—TinyEgg (initial-access backdoor), ChonkyChicken (full-feature implant), a modularized ChonkyChicken controller/plugins architecture, and ChromEggscalator (browser credential theft successor). The report describes delivery via ClickFix/VenomLNK lures and OCX payloads, WebSocket-based C2, 14 on-demand plugin capabilities (including browser theft, keylogging, audio capture), and active use by other cybercrime groups, indicating an ongoing, evolving, and commercially oriented threat.