Latrodectus Malware Loader Emerges as IcedID's Successor in Phishing Campaigns

Latrodectus Malware Loader Emerges in Phishing Campaigns. Email phishing campaigns deliver Latrodectus, a successor to IcedID malware. The malware has extensive focus on enumeration and execution, source code obfuscation, anti-analysis checks, and persistence on Windows hosts. New commands include enumeration of files and retrieving running process ancestry. Latrodectus is being actively developed as a replacement for IcedID. Phishing campaigns also deliver DarkGate malware and employ an updated version of a phishing-as-a-service (PhaaS) platform called Tycoon