In a recent wave of #SocialEngineering, attackers impersonate help desk personnel and use MS Teams to contact potential victims. This campaign distributes Trojanized installers for GlobalProtect to infect vulnerable hosts with #MadMxShell. More info at bit.ly/43lCQLo
Unit42-timely-threat-intel/2025-05-07-IOCs-from-Teams-phishing-for-MadMxShell.txt at main · PaloAltoNetworks/Unit42-timely-threat-intel
A collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence. - PaloAltoNetworks/Unit42-timely-threat-intel
bit.ly
May 12, 2025 at 9:36 PM
In a recent wave of #SocialEngineering, attackers impersonate help desk personnel and use MS Teams to contact potential victims. This campaign distributes Trojanized installers for GlobalProtect to infect vulnerable hosts with #MadMxShell. More info at bit.ly/43lCQLo
Hackers Exploit Google Ads to Spread IP Scanner with Concealed Backdoor
Hackers Exploit Google Ads to Spread IP Scanner with Concealed Backdoor
Malicious actors are distributing a new backdoor, MadMxShell, through a Google Ads campaign that impersonates an IP scanner.
cybersecuritynews.com
April 25, 2024 at 8:06 PM
Hackers Exploit Google Ads to Spread IP Scanner with Concealed Backdoor
🛑 Hackers are using fake domains of popular IP scanners like Advanced IP Scanner & #ManageEngine in a #Google Ads malvertising scheme to spread the MadMxShell backdoor – 45+ domains created since November 2023.
thehackernews.com/2024/04/mali...
#cybersecurity
thehackernews.com/2024/04/mali...
#cybersecurity
Malicious Google Ads Pushing Fake IP Scanner Software with Hidden Backdoor
Hackers are using fake domains of popular IP scanners like Advanced IP Scanner & ManageEngine in a Google Ads malvertising scheme to spread malware.
thehackernews.com
April 20, 2024 at 11:57 PM
🛑 Hackers are using fake domains of popular IP scanners like Advanced IP Scanner & #ManageEngine in a #Google Ads malvertising scheme to spread the MadMxShell backdoor – 45+ domains created since November 2023.
thehackernews.com/2024/04/mali...
#cybersecurity
thehackernews.com/2024/04/mali...
#cybersecurity
A new Google malvertising campaign is leveraging a cluster of domains mimicking a legitimate IP scanner software to deliver a previously unknown backdoor dubbed MadMxShell. thehackernews.com/2024/04/mali...
Malicious Google Ads Pushing Fake IP Scanner Software with Hidden Backdoor
Hackers are using fake domains of popular IP scanners like Advanced IP Scanner & ManageEngine in a Google Ads malvertising scheme to spread malware.
thehackernews.com
April 18, 2024 at 11:28 AM
A new Google malvertising campaign is leveraging a cluster of domains mimicking a legitimate IP scanner software to deliver a previously unknown backdoor dubbed MadMxShell. thehackernews.com/2024/04/mali...
How Does Malvertising Evade Detection?
HIGHLIGHTS
Cybercriminals now use Google Ads to deploy malware.
MadMxShell disguises communications using DNS MX queries.
Users must beware of downloads from unfamiliar sources.
newslinker.co/how-does-mal...
HIGHLIGHTS
Cybercriminals now use Google Ads to deploy malware.
MadMxShell disguises communications using DNS MX queries.
Users must beware of downloads from unfamiliar sources.
newslinker.co/how-does-mal...
How Does Malvertising Evade Detection? - NEWSLINKER
Cybercriminals now use Google Ads to deploy malware. MadMxShell disguises communications using DNS MX queries. Users must beware of downloads from unfamiliar sources.
newslinker.co
April 26, 2024 at 6:42 AM
How Does Malvertising Evade Detection?
HIGHLIGHTS
Cybercriminals now use Google Ads to deploy malware.
MadMxShell disguises communications using DNS MX queries.
Users must beware of downloads from unfamiliar sources.
newslinker.co/how-does-mal...
HIGHLIGHTS
Cybercriminals now use Google Ads to deploy malware.
MadMxShell disguises communications using DNS MX queries.
Users must beware of downloads from unfamiliar sources.
newslinker.co/how-does-mal...
Deceptive Google Ads Mimic IP Scanner Software to Push Backdoor
Deceptive Google Ads Mimic IP Scanner Software to Push Backdoor
Cybersecurity researchers unveiled a new malvertising campaign that uses malicious Google ads to deliver a backdoor dubbed ‘MadMxShell’. The ads leverage a set of domains to push the backdoor and mimic legitimate IP scanner software.
heimdalsecurity.com
April 23, 2024 at 8:50 AM
Deceptive Google Ads Mimic IP Scanner Software to Push Backdoor
Professionisti IT in allerta: La backdoor MadMxShell minaccia i sistemi: Emerge una nuova minaccia per i professionisti IT: una pericolosa backdoor, MadMxShell, si diffonde tramite false pubblicità di programmi utility popolari. L’ecosistema degli specialisti di IT è recentemente stato minacciato…
Professionisti IT in allerta: La backdoor MadMxShell minaccia i sistemi
Emerge una nuova minaccia per i professionisti IT: una pericolosa backdoor, MadMxShell, si diffonde tramite false pubblicità di programmi utility popolari. L’ecosistema degli specialisti di IT è recentemente stato minacciato da una nova backdoor…
www.remoteitalia.com
April 24, 2024 at 8:06 AM
Professionisti IT in allerta: La backdoor MadMxShell minaccia i sistemi: Emerge una nuova minaccia per i professionisti IT: una pericolosa backdoor, MadMxShell, si diffonde tramite false pubblicità di programmi utility popolari. L’ecosistema degli specialisti di IT è recentemente stato minacciato…
The above is from a recent Private Threat Brief: "A MadMXShell Encore"
These reports go out biweekly. Interested in getting them? Contact us below.
Services: thedfirreport.com/services/
Contact Us: thedfirreport.com/contact/
2/2
These reports go out biweekly. Interested in getting them? Contact us below.
Services: thedfirreport.com/services/
Contact Us: thedfirreport.com/contact/
2/2
April 8, 2025 at 11:53 AM
The above is from a recent Private Threat Brief: "A MadMXShell Encore"
These reports go out biweekly. Interested in getting them? Contact us below.
Services: thedfirreport.com/services/
Contact Us: thedfirreport.com/contact/
2/2
These reports go out biweekly. Interested in getting them? Contact us below.
Services: thedfirreport.com/services/
Contact Us: thedfirreport.com/contact/
2/2
