Divergent

Description

This generic detection identifies JavaScript based dropper and downloader malware that delivers additional payloads onto infected systems. Scripts in this class arrive through phishing emails, malvertising, and compromised websites, then fetch heavier payloads such as information stealers and remote access trojans from remote servers. Detections under this name indicate that a script executed and attempted to download follow on malware, which usually signals an intrusion chain in progress.

Stats

First seen

May 2022

Last seen

September 2026

Alert name variants

Related families

References

• malpedia.caad.fkie.fraunhofer.de →