The Gootloader malware, typically used for initial access, is now using a malformed ZIP archive designed to evade detection ...

The packer plays a key role in initial access operations. Rather than delivering a single malware family, pkr_mtsi has been ...

SHADOW#REACTOR is a malware campaign using VBS, PowerShell, and MSBuild to stealthily deploy Remcos RAT with persistent ...

This is an undesirable program. This file has been identified as a program that is undesirable to have running on your computer. This consists of programs that are misleading, harmful, or undesirable.

Security researchers have uncovered new loader malware under active development which uses multiple mechanisms to evade detection. Proofpoint said it detected “WikiLoader” in several campaigns since ...

Two different payloads are hiding in audio files, each paired with one of three loaders. Audio .WAV files are the latest hiding place for obfuscated malicious code; a campaign has been spotted in ...

Spear-phishing emails are spreading the NimzaLoader malware loader, which some say may be used to download Cobalt Strike. The TA800 threat group is distributing a malware loader, which researchers ...

Security researchers warn of a new malware loader that’s used as part of the infection chain for the Aurora information stealer. The loader uses anti-virtual-machine (VM) and unusual compilation ...

An examination of a pay-per-install loader has highlighted its place in the deployment of popular malware strains, including Smokeloader and Vidar. On Tuesday, Intel 471 published a report into ...

It does not crash systems or raise alarms. It blends into everyday Windows activity and works quietly in the background. By the time it is noticed, control may already be lost.Security teams are ...