Security News > 2024 > June > Cybercriminals Employ PhantomLoader to Distribute SSLoad Malware
2024-06-13 10:19
The nascent malware known as SSLoad is being delivered by means of a previously undocumented loader called PhantomLoader, according to findings from cybersecurity firm Intezer. "The loader is added to a legitimate DLL, usually EDR or AV products, by binary patching the file and employing self-modifying techniques to evade detection," security researchers Nicole Fishbein and Ryan Robinson said in
News URL
https://thehackernews.com/2024/06/cybercriminals-employ-phantomloader-to.html
Related news
- Cybercriminals pose as "helpful" Stack Overflow users to push malware (source)
- Police seize over 100 malware loader servers, arrest four cybercriminals (source)
- Police seize over 100 malware loader servers, arrest four cybercriminals (source)
- Europol identifies 8 cybercriminals tied to malware loader botnets (source)