ZipLine Campaign — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

April 16, 2026

Last Seen

April 17, 2026

Related Threat Clusters

PowMix Botnet Targets Czech Organizations with Malicious LNK Files
The PowMix botnet has been identified as targeting Czech organizations since at least December 2025. Attackers use malicious LNK files to initiate a PowerShell loader that extracts a ZIP archive, bypasses AMSI…

3 articles · Updated April 17, 2026

Recent Intelligence Reports

Nascent PowMix botnet covertly compromises Czech workforce | brief — Scworld · April 17, 2026
PowMix botnet targets Czech workforce — Blog.Talosintelligence · April 16, 2026

Related Entities

Botnet Malware Phishing PowMix Campaign Czech Republic MixShell PowMix RondoDox XMRig T1053.005 - Scheduled Task T1053 - Scheduled Task/Job T1059.001 - PowerShell