TA584 Actors Leveraging ClickFix Social Engineering to Deliver Tsundere Bot Malware

Cybersecuritynews •Tushar Subhra Dutta • January 29, 2026

A sophisticated cybercriminal group known as TA584 has expanded its attack toolkit by deploying a new malware called Tsundere Bot through deceptive social engineering tactics. This threat actor, tracked as an initial access broker, has significantly intensified operations throughout 2025, with campaign volumes tripling between March and December. The malware targets organizations globally through carefully […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

TA584 Expands Operations with Tsundere Bot via ClickFix Social Engineering The cybercriminal group TA584 has intensified its operations by deploying Tsundere Bot malware through ClickFix social engineering tactics. This initial access broker has significantly increased its campaign volume, tripling attacks from March to December 2025, targeting organizations worldwide. 5 sources 38

TA584 Actors Leveraging ClickFix Social Engineering to Deliver Tsundere Bot Malware

The full story

Extracted Entities

Attack Types (1)

Malware (1)