DarkGate Malware Campaigns Linked to Vietnam-Based Cybercriminals

Vietnamese cybercriminals have targeted UK, US, and Indian organisations with DarkGate malware attacks since 2018, according to WithSecure researchers. These cybercriminals are also suspected of using the Ducktail infostealer to target Meta business accounts. The Vietnam-based Threat Actor Cluster is likely behind both campaigns, based on non-technical indicators like lure files, themes, and delivery methods, such as LinkedIn messages redirecting the victim to a malicious Google Drive file.