Primarily observed in Spanish-speaking regions (the name translates to "Gypsy Wedding"). ☣️ Infection Chain
Restrict the execution of .7z and .exe files from temp directories or email downloads via Group Policy. bodagitana.7z
Uses obfuscation techniques to bypass basic antivirus signatures. 🛑 Mitigation and Recovery bodagitana.7z
Users receive a phishing email with a link to download a file or an attachment masquerading as wedding photos or invitations. bodagitana.7z
The file is an archive associated with the Boda Gitana malware , a remote access trojan (RAT) often distributed via phishing campaigns. This report details the technical characteristics, infection chain, and mitigation strategies for this threat. 🛡️ Threat Overview File Name: bodagitana.7z (sometimes seen as boda_gitana.7z ) Type: Compressed 7-Zip archive