DARKGATE - THREAT BREAKDOWN JOURNEY

Summary from the TLDR Cybersecurity newsletter

A new malspam campaign has been observed deploying an off-the-shelf malware called DarkGate. It leverages hijacked email threads to trick recipients into downloading the malware. The attack uses phishing to direct users to an MSI payload subject to certain conditions. This article breaks down how this malware works and the technicalities behind it.