MintsLoader malware is being used to distribute GhostWeaver, a sophisticated PowerShell-based RAT, through multi-stage attacks. Active since early 2023, MintsLoader employs obfuscated JavaScript, advanced evasion techniques, and a domain generation algorithm to deliver payloads for cybercr...
Hijack Loader malware has evolved with sophisticated evasion techniques including call stack spoofing, Heaven's Gate for direct syscalls, and enhanced anti-VM capabilities. Meanwhile, researchers discovered SHELBY malware that innovatively uses GitHub repositories for command-and-control o...
A sophisticated malware campaign called OBSCURE#BAT targets users in the US, Canada, Germany, and UK through social engineering tactics to deploy the r77 rootkit. The attack uses fake CAPTCHA pages and malware disguised as legitimate software, executing a multi-stage infection process that...
Ragnar Loader is a sophisticated malware toolkit used by major cybercrime groups including Ragnar Locker, FIN7, FIN8, and Ruthless Mantis. Operating since 2020, this toolkit enables persistent network access through PowerShell-based execution, strong encryption, advanced process injection,...
A newly discovered Windows-targeting remote access trojan, NonEuclid, combines sophisticated evasion techniques with ransomware capabilities. Written in C#, this malware establishes unauthorized remote access, bypasses security measures, maintains persistence, and encrypts files. Its advan...
