Mystery hackers use novel SharkLoader dropper against governments, software devs

Kaspersky uncovered the StrikeShark campaign where attackers deploy a novel dropper called SharkLoader—delivered via exploitation of publicly known vulnerabilities and fake installers—to install Cobalt Strike beacons, perform credential harvesting, reconnaissance and lateral movement across government and software development targets in multiple countries while employing stealth and log-tampering to evade detection.