As cited
Copy frozen at (site build).
threat intel
WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
Researchers identified two new malware families, WordlistLoader and SynkLoader, that deliver next-stage payloads including Amatera Stealer through ClickFix-based phishing campaigns. The malware is suspected to be part of an access-selling operation that targets ransomware groups.
Why it matters: Practitioners should monitor for ClickFix and ClearFake phishing campaigns and assess endpoint detection for WordlistLoader and SynkLoader, as compromise could lead to stealer malware infection and eventual ransomware deployment.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
Researchers identified two new malware families, WordlistLoader and SynkLoader, that deliver next-stage payloads including Amatera Stealer through ClickFix-based phishing campaigns. The malware is suspected to be part of an access-selling operation that targets ransomware groups.
Why it matters: Practitioners should monitor for ClickFix and ClearFake phishing campaigns and assess endpoint detection for WordlistLoader and SynkLoader, as compromise could lead to stealer malware infection and eventual ransomware deployment.
- Source published
- First seen by Cybersecurity Tracker