THREATOPS
THREAT OPSThreat News › Payouts King Ransomware Initial Access Broker Deploys New Edgecution Malware

Payouts King Ransomware Initial Access Broker Deploys New Edgecution Malware

lowzscaler_threatlabzPublished 2026-06-23

IntroductionZscaler ThreatLabz has been monitoring ransomware operations that align with tactics previously employed by an initial access broker affiliated with Payouts King ransomware. In recent attacks, the threat actor leverages social engineering tactics paired with an innovative malware delivery mechanism. The technique utilizes a malicious Microsoft Edge browser extension that exploits

MITRE ATT&CK techniques

Original source: https://www.zscaler.com/blogs/security-research/payouts-king-ransomware-initial-access-broker-deploys-new-edgecution