ManticoraLoader: New Tool By AresLoader Developers

Cyble Research & Intelligence Labs reports the announcement of a new malware-as-a-service called ManticoraLoader, advertised by the DeadXInject/DarkBLUP actors who previously developed AresLoader and AiDLocker. The loader claims wide Windows compatibility, comprehensive device reconnaissance, persistence mechanisms, modular extensibility, and strong obfuscation to evade detection; it is being marketed with a monthly rental fee and limited clients, and the report warns that if the claimed improvements are real this could increase stealthy stealer/botnet infections.