Golden Chickens Deploys New Malware via Fake Security Pages

The page discusses recent findings by Insikt Group regarding the TAG-195 malware group, also known as Golden Chickens, which includes new malware families: TinyEgg, ChonkyChicken, a modular ChonkyChicken variant, and ChromEggscalator. These tools are used for credential theft and remote access in enterprise environments, primarily targeting Windows users. The malware is delivered via ClickFix fake security pages, requiring users to input commands that retrieve malicious payloads.

Notably, ChonkyChicken can record keystrokes and hijack live browser sessions. The modular design allows adaptability during intrusions, and there are at least fourteen modules available for attackers, complicating detection efforts. Security measures suggested include restricting Windows Run dialog access and monitoring for specific suspicious activities.