DarkGate Malware Campaigns Linked to Vietnam-Based Cybercriminals

Vietnam-based cybercriminals are believed to be behind the DarkGate and Ducktail malware attacks that have targeted organisations in the US, UK and India since 2018, according to WithSecure researchers. Ducktail rapidly steals credentials from the local device whilst DarkGate serves a variety of purposes. Despite different functions, both campaigns showed similar initial infection routes. The campaigns reportedly focused on Meta business accounts with LinkedIn messages serving as a common initial vector.