Malware
SmartApeSG
- First Reported
- Mar 17, 2026
- Latest Reported
- Jul 16, 2026
Reported Context (2)
- Taking a short detour to review the SANS ISC report confirms that this domain previously hosted a malicious JavaScript file, d.js, which SANS associates with SmartApeSG, part of the fake software update threat family. Threat-Intelligence Pivots Uncover New Infrastructure Linked to SmartApeSG Campaign
- ZPHP, also known as SmartApeSG, is a JavaScript-based malware loader campaign that uses compromised websites to deliver malware or malicious remote access tools. ZPHP Campaign Uses Fake CAPTCHAs and ClickFix to Deliver Remcos RAT to U.S. Government Organizations
Malware (2)
MITRE ATT&CK (6)
Vendors (3)
Products (7)
Tools (1)
Industries (1)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.