Summary:
Bumblebee, a recently developed malware loader, has quickly become a key component in a wide range of cybercrime attacks. Recently researchers have spotted a new infection chain of the Bumblebee loader malware being distributed. The new infection starts with a password-protected email attachment containing a .VHD extension file. Bumblebee, a replacement for BazarLoader, acts as a downloader. It also delivers known attack frameworks, open-source tools, and other types of malware. Threat actors behind the sophisticated Bumblebee loader keep updating their capabilities to strengthen their evasive maneuvers and anti-analysis tricks to stay a step ahead of cybersecurity entities and to stay updated on the defense mechanisms employed by enterprises.[/subscribe_to_unlock_form]
Summary:
Bumblebee, a recently developed malware loader, has quickly become a key component in a wide range of cybercrime attacks. Recently researchers have spotted a new infection chain of the Bumblebee loader malware being distributed. The new infection starts with a password-protected email attachment containing a .VHD extension file. Bumblebee, a replacement for BazarLoader, acts as a downloader. It also delivers known attack frameworks, open-source tools, and other types of malware. Threat actors behind the sophisticated Bumblebee loader keep updating their capabilities to strengthen their evasive maneuvers and anti-analysis tricks to stay a step ahead of cybersecurity entities and to stay updated on the defense mechanisms employed by enterprises.[emaillocker id="1283"]
References:
The following reports contain further technical details:
https://blog.cyble.com/2022/09/07/bumblebee-returns-with-new-infection-technique/
[/emaillocker]