ZeroFox Intelligence Flash Report - DarkGate Popularity Prompts Pause on New User Support

Product Serial: F-2023-09-15a

TLP:CLEAR

In this flash report, ZeroFox researchers provide updates on recent developments around DarkGate malware, as well as analysis on what these developments likely mean.

Standing Intelligence Requirements

Deep Dark Web and Criminal Underground DDW

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download View the full report here

Key Findings

The resurgence in popularity of DarkGate malware has prompted its founder to discontinue support for new users—a move that ZeroFox assesses is temporary and will lead to a larger number of threat actors deploying this tool, particularly in light of this malware hitting the news cycle.
Threat actors continue to praise DarkGate for its effectiveness, which was displayed in a recent phishing campaign using Microsoft Teams as a lure.