Scworld
Oyster Backdoor Malware Spread via Fake Downloads Targeting Financial Sector
First seen 15 Dec 2025, 16:48 UTC
•
•66% similarity
•47.6
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
Cybercriminals are distributing the Oyster backdoor malware disguised as popular office tools, including Microsoft Teams and Google Meet. This campaign, targeting individuals in the financial sector, has been active since at least mid-November 2025 and utilizes techniques such as SEO poisoning and malvertising to lure victims into downloading malicious software.
ThreatCluster AI