“`html
Threat perpetrators associated with the Interlock ransomware collective have introduced a novel PHP variation of its custom remote access trojan (RAT) within a broad operation employing a variant of ClickFix referred to as FileFix.
“From May 2025 onwards, actions linked to the Interlock RAT have been noted in association with the LandUpdate808 (also known as KongTuke) web-inject threat groups,” The DFIR Report stated in a technical
“`