Elastic Security Labs discovers the LOBSHOT malware

As cited

Copy frozen at 2026-09-20 03:00 UTC (site build).

threat intel

Elastic Security Labs discovers the LOBSHOT malware

Elastic Security Labs identified a new malware family called LOBSHOT that spreads through Google Ads and hosted virtual network computing (hVNC) sessions. The malware disguises backdoors as legitimate application installers to establish persistent access on compromised systems.

Why it matters: Organizations and users downloading software via online ads face infection risk; security teams should monitor for LOBSHOT indicators and educate users on installer verification.

Source published

2023-05-16 00:00 UTC

First seen by Cybersecurity Tracker

2026-09-20 00:53 UTC