New Malware-as-a-Service Olymp Loader Advertised on Hacker Forums with It’s Anti-analysis and Detection Features

Olymp Loader is a newly marketed Malware-as-a-Service (MaaS) first seen in June 2025 that functions as a loader, crypter, and stealer and is advertised as FUD on underground forums; it delivers payloads like LummaC2 and Raccoon Stealer, spreads via social-engineered binaries hosted on legitimate platforms (e.g., GitHub), and has evolved to incorporate embedded encrypted payloads and aggressive Windows Defender neutralization via PowerShell, registry edits, and file deletions.