Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
3 IOCs

New ClickFix Campaign Delivers MLTBackdoor Malware in Multi-Stage Attacks

Cyber Press
Cyber Press
Published June 10, 2026Original Report

Malware Families

Excerpt

A highly sophisticated new malware family, dubbed MLTBackdoor, suspected to be operated by ransomware-affiliated threat actors. Zscaler ThreatLabz discovered that this malicious framework is primarily deployed to establish a firm foothold within compromised networks, paving the way for subsequent lateral movement. The initial infection vector relies on a deceptive social engineering tactic known as ClickFix. Zscaler ThreatLabz observed that attackers use automotive-themed web…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYCobalt StrikeVICTIMunknown
Adversary
Infrastructure
Capability(1)
Victim

Attack Flow8 steps · MITRE ATT&CK mapped

Initial AccessTA0001T1566
1/8
Phishing
ActionTrick user into running script
Attackers use deceptive social engineering (ClickFix) via automotive-themed web pages to trick victims into executing a malicious script.

Indicators of Compromise

Open the mindmap →

3 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA25646b2155c1e71b840d4b7a2e94410b89a61e2446523e6f497206d402eb02e0e93MediumScore 53/100First seen
SHA2569e52cc90cff150abe21f0a6440e86e0a99ff383b81061b96def8948e21d0ac66MediumScore 53/100First seen
SHA2561e41c7bfaa6aa3b93b6cc024274a10e33f3e12fe7c98c1db387ef8927f9d1984MediumScore 53/100First seen

IOC Relationship Graph

Building graph…