CyberSIXT Search
Original
Image: The Hacker News

The Hacker Newsinfo@thehackernews.com (The Hacker News)

RomCom Uses SocGholish Fake Update Attacks to Deliver Mythic Agent Malware

Part of the RomCom story · 3 articles · 3 outlets · since 26 Nov 2025

The article discusses the use of SocGholish fake update attacks by the RomCom group to deliver Mythic Agent malware. It highlights the tactics employed by cybercriminals to exploit users through deceptive software updates, emphasizing the importance of cybersecurity awareness and protective measures against such threats. The piece serves as a warning about the evolving nature of cyber threats and the need for vigilance in digital security.

Story timeline RomCom

Full timeline
Show as table
RomCom coverage
Published (UTC)OutletHeadline
Wed 26 Nov 2025 · 03:20 UTCSecurityOnlineGRU Unit 29155 Uses SocGholish to Target US Firm
Wed 26 Nov 2025 · 09:00 UTCThe Hacker NewsRomCom Uses SocGholish Fake Update Attacks to Deliver Mythic Agent Malware (this article)
Wed 26 Nov 2025 · 21:05 UTCSecurity AffairsFor the first time, a RomCom payload has been observed being distributed via SocGholish

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device