Hogfarming.7z -

The "HogFarming.7z" archive typically contains multiple layers of obfuscation designed to bypass traditional security perimeters.

: Government agencies, NGOs, and telecommunications sectors in Southeast Asia and Europe. HogFarming.7z

: The malware modifies registry keys or creates scheduled tasks to ensure it remains active after system reboots. The "HogFarming

: Launching the primary file triggers the sideloading of a malicious component (often disguised as a library like MpsSvc.dll or similar). : Launching the primary file triggers the sideloading

: The infected system establishes an encrypted connection to a remote server to receive instructions and upload stolen data. Indicators of Compromise (IoCs)

: The file is primarily distributed via Spear Phishing emails. These emails often use topical lures related to regional geopolitics or government directives to entice victims into downloading and extracting the archive. Analysis of the Infection Chain

: Add "HogFarming.7z" and similar suspicious archive names to email and web filter blocklists.