Hagga Aggah infostealer trojan

Updated on 2022-11-22

Yoroi founder and CEO Marco Ramilli published a report on recent developments in the operations of Hagga, a threat actor known for distributing infostealer trojans. Recent changes include the adoption of Fsociety Tools, an open-source penetration testing framework. Read more:

• Is Hagga Threat Actor (ab)using FSociety framework ?
• An Analysis of Infrastructure linked to the Hagga Threat Actor

Overview: Hagga group

Team Cymru published a report on the backend infrastructure of Hagga, a threat actor that has been known to distribute infostealers since the start of 2020. The group is also known as Aggah in some reports.

Read more

• Aggah Campaign Replaces Crypto Currency Addresses with Their Own
• Aggah Campaign’s Latest Tactics: Victimology, PowerPoint Dropper and Cryptocurrency Stealer
• Aghast at Aggah: Teasing Security Controls with Advanced Evasion Techniques
• Serverless InfoStealer delivered in Est European Countries