RomCom Uses SocGholish Fake Update Attacks to Deliver Mythic Agent Malware Emmie Evans November 26, 2025

RomCom Uses SocGholish Fake Update Attacks to Deliver Mythic Agent Malware

The threat actors behind a malware family known as RomCom targeted a U.S.-based civil engineering company via a JavaScript loader dubbed SocGholish to deliver the Mythic Agent.
“This is the first time that a RomCom payload has been observed being distributed by SocGholish,” Arctic Wolf Labs researcher Jacob Faires said in a Tuesday report.
The activity has been attributed with medium-to-high

Write a comment
Your email address will not be published. Required fields are marked *
Scroll to Top