Given the similarities between YiBackdoor, IcedID, and Latrodectus, it's being assessed with medium to high confidence that the new malware is the work of the same developers who are behind the other two loaders. It's also worth noting that Latrodectus, in itself, is believed to be a successor of IcedID. The cybersecurity company said it first identified the malware in June 2025, adding it may be serving as a precursor to follow-on exploitation, such as facilitating initial access for ransomware attacks.
As a result, the UK has agreed to drop its mandate for Apple to provide a 'backdoor' that would have enabled access to the protected encrypted data of American citizens and encroached on our civil liberties.
