G DATA’s latest loader analysis is part technical, part human. Kiss Loader appears to be a new, actively developed malware that uses Early Bird APC injection - the investigation ended with a rare direct conversation between the analyst and the malware author behind the campaign. https://blog.gdatasoftware.com/2026/03/38399-analysis-kissloader