Watch Out for 'Latrodectus' - This Malware Could Be In Your Inbox

**Latrodectus** is a newly identified downloader being distributed in email phishing campaigns since late November 2023; it performs sandbox-evasion (MAC and process-count checks), posts encrypted system info to C2, retrieves and executes payloads, and is used by initial access brokers (TA577/TA578) to deploy additional malware such as IcedID, QakBot, PikaBot and Cobalt Strike, with infrastructure ties to previously observed IcedID operations.