SocGholish Uses Parrot and Keitaro TDS to Spread Malware via Fake Updates

SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and Others

The threat actors behind the SocGholish malware have been observed leveraging Traffic Distribution Systems (TDSs) like Parrot TDS and Keitaro TDS to filter and redirect unsuspecting users to sketchy content. "The core of their operation is a sophisticated Malware-as-a-Service (MaaS) model, where infected systems are sold as initial access points to other cybercriminal organizations," Silent Push

SocGholish Uses Parrot and Keitaro TDS to Spread Malware via Fake Updates

SocGholish, operated by the threat actor group TA569, has solidified its role as a prominent Malware-as-a-Service (MaaS) provider, functioning as an Initial Access Broker (IAB) that sells compromised system access to various cybercriminal clients. Since its emergence around 2017-2018, this malware family, also known as FakeUpdates, has primarily employed deceptive fake browser update lures to […] The post SocGholish Uses Parrot and Keitaro TDS t…