SocGhoulish

North Korean Malware delivery group using fake browser updates to distribute info-stealers and loaders. Works with ransomware affiliates for initial access. Common on compromised websites and malvertising.