This report examines BatShadow, a Vietnamese threat group using the Vampire Bot malware to target digital professionals. The campaign begins with crafted lure documents that deliver the malware, enabling host profiling, real‑time desktop capture, and command‑and‑control activity. Technical analysis links the operation to past campaigns with similar tactics and infrastructure. The report outlines how these attacks gain initial access, execute payloads, and exfiltrate data, and highlights how Unified SASE can help mitigate such threats through stronger visibility, access control, and integrated security enforcement.

Join for free to read