Researchers at Proofpoint revealed more technical details about SocGholish, a malware variant they identified earlier this month, highlighting its noteworthy tactics that differ from traditional phishing campaigns.
Deep Instinct researchers say just because security pros don’t see a prevalence of infections from a specific group, it doesn’t mean the threat actors aren’t maintaining a presence or monitoring devices.
A malicious Chrome browser extension steals the information available during a browser session and then installs malware to assume control of the entire device.