TA4922 cybercrime group targets Europe and Africa with Atlas RAT

THE article discusses the expansion of a Chinese-speaking cybercrime group, TA4922, into Europe and Africa, transitioning from its original focus on East Asia. This group employs a variety of tactics including malware delivery, credential phishing, and credit card theft, customizing their attacks to impersonate local authorities and organizations. Recent changes in their arsenal include a new backdoor, Atlas RAT, and the use of AI to assist in malware development. Proofpoint advises organizations to enhance security measures like application allowlisting to combat this evolving threat.