S1160 Latrodectus

malwareEnterprise

platformsWindows

also known asLatrodectus · IceNova · Unidentified 111

Latrodectus is a Windows malware downloader that has been used since at least 2023 to download and execute additional payloads and modules. Latrodectus has most often been distributed through email campaigns, primarily by TA577 and TA578, and has infrastructure overlaps with historic IcedID operations.

01

techniques used (43)

ATT&CK techniques this enables or maps to.

02

used by groups (2)

Threat groups associated with this.

03

source

Where this definition is published.

view on ATT&CK
scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan