SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and Others

Threat actors behind SocGholish malware are utilizing Traffic Distribution Systems (TDSs) such as Parrot TDS and Keitaro TDS to efficiently filter and redirect users to malicious or suspicious content, enhancing their distribution capabilities. This approach is part of a sophisticated Malware-as-a-Service (MaaS) model, where compromised systems serve as initial access points that are sold to other cybercriminal groups, amplifying the malware's reach and operational complexity.