Inside Zloader’s Latest Trick: DNS Tunneling

Discover how Zloader 2.9.4.0 implemented a custom DNS tunneling protocol combined with TLS encryption to evade network detection.

Zloader Learns Old Tricks

Technical Analysis | Zloader revives an old ZeuS-inspired anti-analysis feature, implementing unique execution restrictions.

ZLoader Malware adds Zeus's anti-analysis feature

Zloader continues to evolve, its authors added an anti-analysis feature that was originally present in the Zeus banking trojan.

ZLoader Malware Evolves with Anti-Analysis Trick from Zeus Banking Trojan

ZLoader modular malware trojan has resurfaced with anti-analysis feature that prevents execution on machines different from the original infection.

New ZLoader Malware Variant Surfaces with 64-bit Windows Compatibility

ZLoader malware resurfaces after 2 years, targeting Windows systems with ransomware.

Conti’s Ransomware Toll on the Healthcare Industry – Krebs on Security

Conti’s Ransomware Toll on the Healthcare Industry – Krebs on Security

Kein "Malware as a Service" mehr: Microsoft demoliert ZLoader-Botnetz

Beim Botnetz ZLoader hat es sich erstmal ausgebottet: 65 der Kontroll-Domains werden jetzt von Microsoft betrieben.

Zloader nutzt neue Infektionstechnik um Entdeckung zu entgehen

Zloader kombiniert ein Word und ein Excel Dokument mit Makros, bei dem der eigentliche Schadcode erst nachträglich heruntergeladen wird.

From Dawn to "Silent Night": "DarkSide Ransomware" Initial Attack Vector Evolution

Disclaimer: This is a redacted excerpt of the report published by the subject matter expert team at Advanced Intelligence for the flagship product “Andariel”. DarkSide's affiliate group ascension to the top of the cybercrime food chain was determined by DarkSide's ability to build its initial attack arsenal, which included RDPs, infrastructural vulnerabilities, and, most importantly, a liaison with the Zloader aka "Silent Night" botnet sub-group operation. DarkSide positioned itself as a unique