ctrlINT What the industry said about every indicator, with the quote

MalsmokeThreat actor

Malsmoke primarily targets Japanese users through malvertising campaigns that deliver Zloader malware, often leveraging adult content lures and geographic IP information. The group has transitioned from exploit kits, such as Fallout, to social engineering tactics, including fake Java updates, while maintaining a focus on high-traffic adult websites.From MISP Galaxy

Last reported 8 months ago, by Group-IB1 report

Reports per month

last 12 months

October so far (hatched). Counted by report, not by story.

What the reports say

1 report, newest first · the exact sentence from each
  1. “Part of the analyzed activity in the ShadowSyndicate cluster can be attributed to Cl0p, ALPHV/BlackCat, Black Basta, Ryuk, and Malsmoke.”

    Group-IBVendor
    Shaping Shadows: Breaking Down New ShadowSyndicate Methods and Infrastructure

Thanks — we review every report.

Report a wrong match
What is wrong with Malsmoke here?
No account needed. We do not store your IP address.