Olymp Loader: Emerging Malware-as-a-Service Threat in 2025

Olymp Loader is a Malware-as-a-Service surfaced in mid-2025, advertised as FUD and written in assembly; it functions as a loader/crypter and includes modules to steal browser credentials, Telegram data, and desktop cryptocurrency wallets. The campaign used underground forums and disguised GitHub releases for distribution, evolved from botnet features to an encrypted dropper that attempts to disable Windows Defender and establish persistence, and primarily delivers credential stealers and remote-access tools.