#malware-loader

[ follow ]
#gootloader #seo-poisoning #cobalt-strike #yibackdoor #icedid #latrodectus #backdoor #countloader #ransomware
Information security
fromBleepingComputer
2 weeks ago

Gootloader malware is back with new tricks after 7-month break

Gootloader resumed SEO-poisoning campaigns to distribute JavaScript-based malware via fake legal document sites, delivering secondary payloads like Cobalt Strike and ransomware access.
fromThe Hacker News
2 months ago

New YiBackdoor Malware Shares Major Code Overlaps with IcedID and Latrodectus

Given the similarities between YiBackdoor, IcedID, and Latrodectus, it's being assessed with medium to high confidence that the new malware is the work of the same developers who are behind the other two loaders. It's also worth noting that Latrodectus, in itself, is believed to be a successor of IcedID. The cybersecurity company said it first identified the malware in June 2025, adding it may be serving as a precursor to follow-on exploitation, such as facilitating initial access for ransomware attacks.
Information security
Information security
fromThe Hacker News
2 months ago

CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader

CountLoader is a versatile malware loader used by Russian ransomware affiliates and IABs to deliver Cobalt Strike, AdaptixC2, PureHVNC RAT, and other post-exploitation tools.
[ Load more ]