Malware
Notifier
- First Reported
- Aug 2, 2026
- Latest Reported
- Aug 2, 2026
Reported Context (1)
- As in previous cases, the Notifier malware was used; however, unlike past PowerShell scripts that used the same C&C server address, version 2.1 Uses the Telegram API to send infection status reports to the threat actor. Larva-24009 Uses Phishing to Deploy PowerShell Backdoors and Steal Data
Malware (1)
Threat Actors (1)
MITRE ATT&CK (13)
Vendors (1)
Products (4)
Tools (6)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.