logo

Bumblebee Loader On The Rise

ID: ade495bf-0ecc-54c0-b7e4-cf28e0524071

STIX ID: report--ade495bf-0ecc-54c0-b7e4-cf28e0524071

Feed Name: Cyble Blog

Threat Score
78/100

Date Published: 2025-05-20

Date Updated: 2026-07-16

...
...

Bumblebee is a sophisticated malware loader distributed via spear-phishing emails and malicious ISO attachments that executes DLL payloads (using LNK/PowerShell/rundll32) to deliver Cobalt Strike and other tooling; the report documents its anti-analysis and VM/sandbox evasion, process injection and persistence techniques, lists file and network indicators (hashes, filenames, C2 IPs), and provides mitigations to reduce infection risk.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.