New ZLoader Malware Variant Surfaces with 64-bit Windows Compatibility
ID: fd248db6-b673-5bc8-8172-e4485d0492fd
STIX ID: report--fd248db6-b673-5bc8-8172-e4485d0492fd
Feed Name: The Hacker News
**ZLoader returns:** Threat hunters have observed a new campaign delivering updated ZLoader 64-bit variants (2.1.6.0/2.1.7.0) that add RSA encryption in the loader, an updated domain generation algorithm as a fallback, RC4-protected static configuration, filename checks to evade sandboxes, and other obfuscation measures; distribution is via phishing, malicious search ads and MSIX installers, and the loader is expected to facilitate ransomware and information-stealing follow-on payloads.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
