Connecting the Dots Reveals Crimeware Shake-up
Summary: Cisco Talos found that roughly 85% of identified command-and-control domains tied to the Lurk banking trojan were registered to a single registrant account, john[.]bruggink@yahoo[.]co[.]uk, an address also linked to Bedep and Angler. Angler has not returned since disappearing for three weeks in June, and large-scale gates have migrated to Rig and Neutrino, while Nuclear also disappeared shortly after research projects from Talos and Checkpoint.
Key Takeaway: Talos estimates a much smaller group may have been responsible for a far larger chunk of the crimeware space than previously thought, and it expects lesser-known kits like Rig and Neutrino to fill the void Angler leaves behind.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026