Technical Analysis of MLTBackdoor

IntroductionIn May 2026, Zscaler ThreatLabz identified a new malware family that we track as MLTBackdoor that is likely leveraged by a ransomware-related threat actor. MLTBackdoor has been observed by ThreatLabz being delivered in a multi-stage ClickFix infection chain. MLTBackdoor supports a set of commands like downloading and uploading files from the victim’s system. However, one of the mo