Rhadamanthys Malware Disguised as Groupware Installer (Detected by MDS)

Recently, AhnLab SEcurity intelligence Center (ASEC) discovered the distribution of Rhadamanthys under the guise of an installer for groupware. The threat actor created a fake website to resemble the original website and exposed the site to the users using the ad feature in search engines. ASEC Blog has previously covered malware distributed through such ad features of search engines in the article titled “Hey, This Isn’t the Right Site!” Distribution of Malware Exploiting Google Ads Tracking [1].

The malware …

actor ahnlab asec blog center disguised distribution exposed fake fake website feature groupware installer intelligence malware malware analysis mds rhadamanthys search search engines security security intelligence threat threat actor under website