Latest Malware Loader news

New Unfurling Hemlock threat actor floods systems with malware

A threat actor tracked as Unfurling Hemlock has been infecting target systems with up to ten pieces of malware at the same time in campaigns that distribute hundreds of thousands of malicious files.
- Bill Toulas
- June 27, 2024
- 06:27 PM
- 0
Police seize over 100 malware loader servers, arrest four cybercriminals

An international law enforcement operation codenamed 'Operation Endgame' has seized over 100 servers worldwide used by multiple major malware loader operations, including IcedID, Pikabot, Trickbot, Bumblebee, Smokeloader, and SystemBC.
- Bill Toulas
- May 30, 2024
- 04:35 AM
- 1
New Latrodectus malware replaces IcedID in network breaches

A relatively new malware called Latrodectus is believed to be an evolution of the IcedID loader, seen in malicious email campaigns since November 2023.
- Bill Toulas
- April 04, 2024
- 04:38 PM
- 0
New Qbot malware variant uses fake Adobe installer popup for evasion

The developer of Qakbot malware, or someone with access to the source code, seems to be experimenting with new builds as fresh samples have been observed in email campaigns since mid-December.
- Bill Toulas
- February 15, 2024
- 08:27 AM
- 0
Bumblebee malware attacks are back after 4-month break

The Bumblebee malware has returned after a four-month vacation, targeting thousands of organizations in the United States in phishing campaigns.
- Bill Toulas
- February 13, 2024
- 10:41 AM
- 0
DarkGate and Pikabot malware emerge as Qakbot’s successors

A sophisticated phishing campaign pushing the DarkGate malware infections has recently added the PikaBot malware into the mix, making it the most advanced phishing campaign since the Qakbot operation was dismantled.
- Bill Toulas
- November 21, 2023
- 10:55 AM
- 0
New BunnyLoader threat emerges as a feature-rich malware-as-a-service

Security researchers discovered a new malware-as-a-service (MaaS) named 'BunnyLoader' advertised on multiple hacker forums as a fileless loader that can steal and replace the contents of the system clipboard.
- Bill Toulas
- October 02, 2023
- 03:59 PM
- 2
Bumblebee malware returns in new attacks abusing WebDAV folders

The malware loader 'Bumblebee' has broken its two-month vacation with a new campaign that employs new distribution techniques that abuse 4shared WebDAV services.
- Bill Toulas
- September 18, 2023
- 12:47 PM
- 0
New Mystic Stealer malware increasingly used in attacks

A new information-stealing malware named 'Mystic Stealer,' has been promoted on hacking forums and darknet markets since April 2023, quickly gaining traction in the cybercrime community.
- Bill Toulas
- June 18, 2023
- 11:14 AM
- 0
Fake in-browser Windows updates push Aurora info-stealer malware

A recently spotted malvertising campaign tricked users with an in-browser Windows update simulation to deliver the Aurora information stealing malware.
- Bill Toulas
- May 10, 2023
- 02:23 PM
- 1
Google ads push BumbleBee malware used by ransomware gangs

The enterprise-targeting Bumblebee malware is distributed through Google Ads and SEO poisoning that promote popular software like Zoom, Cisco AnyConnect, ChatGPT, and Citrix Workspace.
- Bill Toulas
- April 22, 2023
- 10:08 AM
- 0
New IcedID variants shift from bank fraud to malware delivery

New IcedID variants have been found without the usual online banking fraud functionality and instead focus on installing further malware on compromised systems.
- Bill Toulas
- March 27, 2023
- 03:25 PM
- 0
Google ads push ‘virtualized’ malware made for antivirus evasion

An ongoing Google ads malvertising campaign is spreading malware installers that leverage KoiVM virtualization technology to evade detection when installing the Formbook data stealer.
- Bill Toulas
- February 02, 2023
- 07:04 PM
- 1
New info-stealer malware infects software pirates via fake cracks sites

A new information-stealing malware named 'RisePro' is being distributed through fake cracks sites operated by the PrivateLoader pay-per-install (PPI) malware distribution service.
- Bill Toulas
- December 24, 2022
- 10:08 AM
- 2
Phishing drops IceXLoader malware on thousands of home, corporate devices

A ongoing phishing campaign has infected thousands of home and corporate users with a new version of the 'IceXLoader' malware.
- Bill Toulas
- November 10, 2022
- 05:58 PM
- 0