Threat Investigation
Request a demo
Other threat group

DriveSurge

DriveSurge is classified as other threat group.

Type
Other threat group

DriveSurge compromises legitimate websites to inject scripts that route visitors through zTDS, leading them to fake browser updates and ClickFix-style prompts. This operation resembles an initial-access broker model, where successful infections generate leads for downstream threat actors. The actor employs tactics that avoid detection by site administrators, allowing infections to go unnoticed during routine checks.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.