@huntress.com
ClickFix lures use fake Cloudflare verifications, malvertising, and steganographic PNG payloads to deliver RATs like DuskDesk and...
-
IOCs: apirequestaccess[.]com, 167[.]148[.]201[.]104, 23[.]227[.]199[.]41
-
#ClickFix #MalwareLoader #SocialEngineering #ThreatIntel
ClickFix lures use fake Cloudflare verifications, malvertising, and steganographic PNG payloads to deliver RATs like DuskDesk and...
-
IOCs: apirequestaccess[.]com, 167[.]148[.]201[.]104, 23[.]227[.]199[.]41
-
#ClickFix #MalwareLoader #SocialEngineering #ThreatIntel
Link
www.huntress.com
November 11, 2026 at 12:34 PM
@huntress.com
ClickFix lures use fake Cloudflare verifications, malvertising, and steganographic PNG payloads to deliver RATs like DuskDesk and...
-
IOCs: apirequestaccess[.]com, 167[.]148[.]201[.]104, 23[.]227[.]199[.]41
-
#ClickFix #MalwareLoader #SocialEngineering #ThreatIntel
ClickFix lures use fake Cloudflare verifications, malvertising, and steganographic PNG payloads to deliver RATs like DuskDesk and...
-
IOCs: apirequestaccess[.]com, 167[.]148[.]201[.]104, 23[.]227[.]199[.]41
-
#ClickFix #MalwareLoader #SocialEngineering #ThreatIntel
~Malpedia~
VMLoader and GPULoader deliver SectopRat, decrypting payloads on the GPU and fetching C2 from Binance Smart Chain contracts, targeting IT and...
-
IOCs: legsotier[.]us, neeitoerw[.]my, apisue[.]click
-
#AdversaryInTheMiddle #Infostealer #MalwareLoader #ThreatIntel
VMLoader and GPULoader deliver SectopRat, decrypting payloads on the GPU and fetching C2 from Binance Smart Chain contracts, targeting IT and...
-
IOCs: legsotier[.]us, neeitoerw[.]my, apisue[.]click
-
#AdversaryInTheMiddle #Infostealer #MalwareLoader #ThreatIntel
Link
malpedia.caad.fkie.fraunhofer.de
November 9, 2026 at 12:35 PM
~Malpedia~
VMLoader and GPULoader deliver SectopRat, decrypting payloads on the GPU and fetching C2 from Binance Smart Chain contracts, targeting IT and...
-
IOCs: legsotier[.]us, neeitoerw[.]my, apisue[.]click
-
#AdversaryInTheMiddle #Infostealer #MalwareLoader #ThreatIntel
VMLoader and GPULoader deliver SectopRat, decrypting payloads on the GPU and fetching C2 from Binance Smart Chain contracts, targeting IT and...
-
IOCs: legsotier[.]us, neeitoerw[.]my, apisue[.]click
-
#AdversaryInTheMiddle #Infostealer #MalwareLoader #ThreatIntel
~Asec~
Wpcdoor spreads through Korean DVR management software CMS, using DLL side-loading to steal browser credentials, wallet seed phrases, and...
-
IOCs: 172[.]86[.]127[.]14, 172[.]86[.]127[.]89, 144[.]172[.]116[.]37
-
#Backdoor #DLLSideloading #MalwareLoader #ThreatIntel
Wpcdoor spreads through Korean DVR management software CMS, using DLL side-loading to steal browser credentials, wallet seed phrases, and...
-
IOCs: 172[.]86[.]127[.]14, 172[.]86[.]127[.]89, 144[.]172[.]116[.]37
-
#Backdoor #DLLSideloading #MalwareLoader #ThreatIntel
Link
asec.ahnlab.com
November 11, 2026 at 12:32 PM
~Asec~
Wpcdoor spreads through Korean DVR management software CMS, using DLL side-loading to steal browser credentials, wallet seed phrases, and...
-
IOCs: 172[.]86[.]127[.]14, 172[.]86[.]127[.]89, 144[.]172[.]116[.]37
-
#Backdoor #DLLSideloading #MalwareLoader #ThreatIntel
Wpcdoor spreads through Korean DVR management software CMS, using DLL side-loading to steal browser credentials, wallet seed phrases, and...
-
IOCs: 172[.]86[.]127[.]14, 172[.]86[.]127[.]89, 144[.]172[.]116[.]37
-
#Backdoor #DLLSideloading #MalwareLoader #ThreatIntel
@sophossecurity.bsky.social
North Korean groups use fake coding interviews to deliver BeaverTail and InvisibleFerret malware to developer laptops via malicious GitHub assignments opened in VS Code.
-
IOCs: (None identified)
-
#Backdoor #MalwareLoader #SocialEngineering #ThreatIntel
North Korean groups use fake coding interviews to deliver BeaverTail and InvisibleFerret malware to developer laptops via malicious GitHub assignments opened in VS Code.
-
IOCs: (None identified)
-
#Backdoor #MalwareLoader #SocialEngineering #ThreatIntel
Link
www.sophos.com
November 5, 2026 at 4:16 AM
@sophossecurity.bsky.social
North Korean groups use fake coding interviews to deliver BeaverTail and InvisibleFerret malware to developer laptops via malicious GitHub assignments opened in VS Code.
-
IOCs: (None identified)
-
#Backdoor #MalwareLoader #SocialEngineering #ThreatIntel
North Korean groups use fake coding interviews to deliver BeaverTail and InvisibleFerret malware to developer laptops via malicious GitHub assignments opened in VS Code.
-
IOCs: (None identified)
-
#Backdoor #MalwareLoader #SocialEngineering #ThreatIntel
2CLoader malware dodges sandboxes and security tools to deliver Vidar and Remus infostealers. See how it works and how to detect it.
#2CLoader #Vidar #Remus #XWorm #Infostealer #MalwareLoader #ThreatLabz #CyberSecurity
#2CLoader #Vidar #Remus #XWorm #Infostealer #MalwareLoader #ThreatLabz #CyberSecurity
New 2CLoader Malware Delivers Vidar and Remus Infostealers While Dodging Sandboxes
At a Glance Malware family 2CLoader (Windows loader) Threat actor Unknown; no attribution Targets Windows users; victim counts not disclosed Delivery vector Not specified in the report Payloads Vidar and Remus infostealers, XWorm RAT Key capabilities Indirect syscalls, anti-VM and anti-debug checks, API hooks, six persistence options Sources Zscaler ThreatLabz; Flashpoint TL;DR 2CLoader is a new, highly configurable loader that hides from security tools and sandboxes.
securityonline.info
October 5, 2026 at 7:14 AM
2CLoader malware dodges sandboxes and security tools to deliver Vidar and Remus infostealers. See how it works and how to detect it.
#2CLoader #Vidar #Remus #XWorm #Infostealer #MalwareLoader #ThreatLabz #CyberSecurity
#2CLoader #Vidar #Remus #XWorm #Infostealer #MalwareLoader #ThreatLabz #CyberSecurity
Cracked Software Spreads Loader Malware
Read More: buff.ly/4eMfgxD
#CountLoader #CrackedSoftwareMalware #MalwareLoader #InitialAccess #InfostealerDelivery #RATDeployment #ThreatCampaign #CyberCrime #EndpointSecurity
Read More: buff.ly/4eMfgxD
#CountLoader #CrackedSoftwareMalware #MalwareLoader #InitialAccess #InfostealerDelivery #RATDeployment #ThreatCampaign #CyberCrime #EndpointSecurity
December 24, 2025 at 3:00 PM
Cracked Software Spreads Loader Malware
Read More: buff.ly/4eMfgxD
#CountLoader #CrackedSoftwareMalware #MalwareLoader #InitialAccess #InfostealerDelivery #RATDeployment #ThreatCampaign #CyberCrime #EndpointSecurity
Read More: buff.ly/4eMfgxD
#CountLoader #CrackedSoftwareMalware #MalwareLoader #InitialAccess #InfostealerDelivery #RATDeployment #ThreatCampaign #CyberCrime #EndpointSecurity
Malware-Familie CoffeeLoader mit starken Verschleierungstechniken
#CoffeeLoader #Cybersecurity #Cybersicherheit #Malware #MalwareLoader @Zscaler_DACH @Zscaler
netzpalaver.de/2025/...
#CoffeeLoader #Cybersecurity #Cybersicherheit #Malware #MalwareLoader @Zscaler_DACH @Zscaler
netzpalaver.de/2025/...
April 10, 2025 at 11:34 AM
Malware-Familie CoffeeLoader mit starken Verschleierungstechniken
#CoffeeLoader #Cybersecurity #Cybersicherheit #Malware #MalwareLoader @Zscaler_DACH @Zscaler
netzpalaver.de/2025/...
#CoffeeLoader #Cybersecurity #Cybersicherheit #Malware #MalwareLoader @Zscaler_DACH @Zscaler
netzpalaver.de/2025/...
CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader reconbee.com/countloader-...
#CountLoader #russian #russianransomware #ransomwareattack #malwareloader #malwareattack
#CountLoader #russian #russianransomware #ransomwareattack #malwareloader #malwareattack
CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader
victims into installing it read more about CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader
reconbee.com
September 19, 2025 at 12:18 PM
CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader reconbee.com/countloader-...
#CountLoader #russian #russianransomware #ransomwareattack #malwareloader #malwareattack
#CountLoader #russian #russianransomware #ransomwareattack #malwareloader #malwareattack