Stealthy Malware Leverages MQTT Protocol in Spam Campaigns

The threat actors behind a sophisticated malware that was discovered less than a year ago have recently expanded their targeting and updated the malware's C2 communication tactics in an attempt to make it more difficult for security teams to detect their attacks.

The malware, tracked by researchers as WailingCrab, was first discovered in December 2022, and has been used in email campaigns to deliver the Gozi backdoor against targets in Italy. However, researchers with IBM’s X-Force team this week said …

attacks campaigns communication detect malware mqtt protocol researchers security security teams sophisticated malware spam tactics targeting teams threat threat actors