← Back to Feed

KongTuke FileFix Leads to New Interlock RAT Variant

July 14, 2025 · DFIR Report · Severity: CRITICAL

This DFIR Report analysis covers ransomware threats including attack chains, indicators of compromise, and recommended defensive measures. Ransomware continues to be a primary cyber risk for organizations across all sectors.

Key Takeaways

  • Researchers from The DFIR Report, in partnership with Proofpoint, have identified a new and resilient variant of the. Since May 2025, activity related to […] The post KongTuke FileFix Leads to New Interlock RAT Variant appeared.
  • This new malware, a shift from the previously identified JavaScript-based Interlock RAT (aka NodeSnake), uses PHP.
☕ Buy a Coffee