From IcedID to Dagon Locker Ransomware in 29 Days

In August 2023, we observed an intrusion that started with a phishing campaign using PrometheusTDS to distribute IcedID, which eventually ended in Dagon Locker Ransomware.

[https://thedfirreport.com/2024/04/29/from-icedid-to-dagon-locker-ransomware-in-29-days/](https://thedfirreport.com/2024/04/29/from-icedid-to-dagon-locker-ransomware-in-29-days/)

august campaign computerforensics icedid intrusion locker phishing phishing campaign ransomware