#ParsedReport #CompletenessLow
22-09-2026

2026 Proxyware Distribution Cases by the Larva-25012 Attacker (DigitalPulse, SOAX, Appsalt, IPRoyal)

https://asec.ahnlab.com/ko/95515/

Report completeness: Low

Actors/Campaigns:
Larva-25012
Honeygain
Infatica

Threats:
Digitalpulse
Appsalt_tool
Iproyal_pawns_tool
Proxyjacking_technique
Dploader
Trojan/win.loader.c5946067
Trojan/win.loader.c5946330
Trojan/win.loader.c5948027

Victims:
Systems, South korea

ChatGPT TTPs:
do not use without manual check
T1027, T1036, T1053.005, T1055, T1059.001, T1059.006, T1059.007, T1082, T1105, T1129, have more...

IOCs:
Command: 6
File: 9
Url: 1

Soft:
Steam, Task Scheduler, Microsoft Defender

Algorithms:
md5

Functions:
liblivenet_init, appsalt_init, TaskRegistrationMaintenanceTask

Languages:
javascript, powershell, python