Cloud Threats Memo: Multiple DarkGate Loader Campaigns Exploiting Legitimate Cloud Services

DarkGate Loader is a commodity malware loader with multiple features including the ability to download and execute files to memory, a Hidden Virtual Network Computing (HVNC) module, keylogging, information-stealing capabilities, and privilege escalation. Its distribution mechanism also makes use of legitimate AutoIt files to inject the malicious payload. The DarkGate Loader is normally distributed via […]

The post Cloud Threats Memo: Multiple DarkGate Loader Campaigns Exploiting Legitimate Cloud Services appeared first on Netskope.

autoit campaigns capabilities cloud cloud services cloud threats commodity malware computing darkgate distribution download escalation exploiting features files hidden hvnc information inject keylogging loader malicious malware mechanism memory network network computing payload privilege privilege escalation services stealing threat labs threats virtual virtual network computing