This analysis looks at , a file associated with a sophisticated malware campaign that distributes a trojanized version of the 7-Zip archiver .
Distribution through a lookalike website, 7zip[.]com (impersonating the legitimate 7-zip.org ). GiantSpider.7z
Collects system data including CPU details, hardware configuration, and network info. Technical Indicators This analysis looks at , a file associated
The file GiantSpider.7z (or similar archives distributed via ) is part of a campaign that transforms victim machines into residential proxy nodes . These nodes allow third parties to route internet traffic through the victim’s IP address, often to facilitate fraud, scraping, or anonymity laundering. 🕷️ Key Threat Intelligence Technical Indicators The file GiantSpider
Automatically modifies Windows firewall rules to allow incoming and outgoing proxy traffic.
Installs as a SYSTEM-level Windows service to ensure it runs even after reboots.
The installers were signed with a now-revoked certificate issued to JOZEAL NETWORK TECHNOLOGY CO., LIMITED to bypass basic security warnings. Execution & Payload Details