As cited
Copy frozen at (site build).
threat intel
Foul Language: WordlistLoader Disguises Malware as Ordinary Text
Threat actors are using a technique called WordlistLoader to disguise malware as ordinary text files and evade detection while delivering Amatera infostealer. This approach follows ClickFix-style campaign tactics. The method allows attackers to conceal malicious payloads in ways that bypass traditional security controls.
Why it matters: Organizations and endpoint security teams need to monitor for Amatera infostealer campaigns, particularly those employing obfuscation techniques, as credential theft poses immediate risk to user accounts and enterprise access.
- Source published
- First seen by Cybersecurity Tracker