THREATOPS
THREAT OPSThreat News › KongTuke FileFix Leads to New Interlock RAT Variant

KongTuke FileFix Leads to New Interlock RAT Variant

infodfirreportPublished 2025-07-14

<p>Researchers from The DFIR Report, in partnership with Proofpoint, have identified a new and resilient variant of the Interlock ransomware group&#8217;s remote access trojan (RAT). This new malware, a shift from the previously identified JavaScript-based Interlock RAT (aka NodeSnake), uses PHP and is being used in a widespread campaign. Since May 2025, activity related to [&#8230;]</p> <p>The po

MITRE ATT&CK techniques

Original source: https://thedfirreport.com/2025/07/14/kongtuke-filefix-leads-to-new-interlock-rat-variant/