Morphisec threat researchers share an in-depth analysis on Matanbuchus, a stealthy malware loader that has advanced its techniques in 2025.

The Matanbuchus malware loader has been seen being distributed through social engineering over Microsoft Teams calls impersonating IT helpdesk.

The Matanbuchus malware loader has been distributed via social engineering on Microsoft Teams calls, impersonating IT helpdesk personnel to execute

Alleged Sale of Matanbuchus 3.0 Malware Loader

In a worrying development for cybersecurity, the long-running Matanbuchus malware, first identified in 2020, has re-emerged with a new, more sophisticated version. Targeting businesses and organizations, Matanbuchus v3.0 demonstrates advanced evasion tactics, encrypted communication methods, and the ability to deliver secondary payloads that could lead to ransomware attacks. Recent analyses from Zscaler ThreatLabz reveal how this malware continues to evolve, leveraging modern obfuscation techniques and advanced persistence strategies that make detection and removal increasingly challenging.

Matanbuchus 3.0 malware loader evolves with advanced stealth techniques, targeting companies via social engineering tactics.

Matanbuchus 3.0 malware loader evolves with advanced stealth techniques, targeting companies via social engineering tactics.

Cybersecurity researchers uncovered a sophisticated attack chain where attackers used ClickFix social engineering to deliver Matanbuchus 3.0

A sophisticated cyberattack campaign has emerged targeting organizations through Microsoft Teams impersonation.

Cybersecurity researchers have flagged a new variant of a known malware loader called Matanbuchus that packs in significant features to enhance its stealth and evade detection. Matanbuchus is the name...

Matanbuchus 3.0 malware loader evolves with advanced stealth techniques, targeting companies via social engineering tactics.

Cybersecurity researchers have flagged a new variant of a known malware loader called Matanbuchus that packs in significant features to enhance its stealth and evade detection. Matanbuchus is the name given to a malware-as-a-service (MaaS) offering that can act as a conduit for next-stage payloads, including Cobalt Strike beacons and ransomware. First advertised in February 2021 on

Infrared Ibis infiltrates Chrome extensions and Saffron Starling surprises in this month's edition of Intelligence Insights