The installers were signed with a now-revoked certificate issued to JOZEAL NETWORK TECHNOLOGY CO., LIMITED to bypass basic security warnings. Execution & Payload Details
Automatically modifies Windows firewall rules to allow incoming and outgoing proxy traffic. GiantSpider.7z
The primary proxy payload that establishes connections to C2 servers. A support library used by the main payload. Malicious Actions The installers were signed with a now-revoked certificate