Skip to content
ThreatCluster

Matanbuchus Downloader Used for Ransomware Deployment and Persistence

First seen 3 Dec 2025, 11:41 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Threat actors are utilizing the Matanbuchus downloader to deliver ransomware and maintain persistence within compromised systems. This malicious downloader is part of a broader trend in cyberattacks targeting various organizations, leading to significant security breaches. The ongoing exploitation of this tool highlights the need for enhanced cybersecurity measures.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 199d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track Matanbuchus in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed