GuLoader Archives • Daily CyberSecurity

Hiding in the Cloud: GuLoader Malware Evolves to Evade Detection

GuLoader Malware CloudEye Obfuscation npm, malware Ethereum, npm supply chain OAST techniques StilachiRAT macOS Malware PasivRobber

Hiding in the Cloud: GuLoader Malware Evolves to Evade Detection

Do Son February 11, 2026

Zscaler analyzes GuLoader's evolution. The malware uses Google Drive, polymorphic code, and exception-based obfuscation to evade detection.

Guloader Malware Rides Wave of Fake Performance Reports Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft

Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft

Guloader Malware Rides Wave of Fake Performance Reports

Do Son January 9, 2026

New phishing campaign uses fake layoff warnings to drop Guloader and Remcos RAT. Learn how this HR-themed scam exploits workplace anxiety to steal data.

Makop Ransomware Evolves: GuLoader and BYOVD EDR Killers Used to Attack RDP-Exposed Networks Cuckoo Spear campaign - APT 10

Makop Ransomware Evolves: GuLoader and BYOVD EDR Killers Used to Attack RDP-Exposed Networks

Do Son December 11, 2025

Makop ransomware operators now use GuLoader and BYOVD (ThrottleStop.sys) to bypass EDR and security. The "low-effort" campaign targets RDP-exposed networks, with 55% of attacks aimed at India.

SERPENTINE#CLOUD: Stealthy Malware Campaign Leverages Cloudflare Tunnels for In-Memory RAT Delivery TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm

TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm

SERPENTINE#CLOUD: Stealthy Malware Campaign Leverages Cloudflare Tunnels for In-Memory RAT Delivery

Do Son June 20, 2025

The SERPENTINE#CLOUD campaign exploits Cloudflare Tunnel subdomains and LNK files to deliver in-memory RATs like AsyncRAT and Remcos, evading detection.

GuLoader Campaign Targets European Industrial Sector with Evolving Evasion Techniques matrix-434033_1280

GuLoader Campaign Targets European Industrial Sector with Evolving Evasion Techniques

Do Son November 11, 2024

Uncover the targeted GuLoader campaign impacting European industrial and engineering companies. Learn about the evasive malware and its sophisticated tactics.

Stealthy New Golang Trojan Exploits Fake Certificates for Evasive Communication

Do Son March 27, 2024

Security researchers at SonicWall Capture Labs have discovered a cunning new Trojan written in the Golang programming language

SVG Attacks: How GULoader Malware Sneaks into Your Network

Do Son February 28, 2024

Enter GULoader, a malware favored by cybercriminals for its stealth, adaptability, and ability to bypass defenses

AgentTesla and Beyond: McAfee Reveals Diverse VBS Malware Tactics Remcos RAT malware

AgentTesla and Beyond: McAfee Reveals Diverse VBS Malware Tactics

Do Son January 17, 2024

Remcos RAT malware communicates with a remote IP address and initiates malicious activities, including keylogging and capturing screenshots

Unit 42’s Insight: The Sophisticated Evasion Tactics of GuLoader and RedLine Stealer

Do Son January 5, 2024

Among the myriad of threats, GuLoader and RedLine Stealer stand out for their sophisticated anti-analysis techniques.