Summary:
Recently, researchers discovered an ongoing GuLoader malware campaign, having a huge impact on the South Korean and American e-commerce industries.GuLoader is a sophisticated shellcode downloader known for employing anti-analysis techniques to avoid detection and obstruct reverse engineering. The malspam activity is significant for changing from Microsoft Word documents containing malware to NSIS executable files for malware loading.NSIS, or Nullsoft Scriptable Install System, is a script-driven open source tool for creating Windows installers. Including malicious executable files in archives and images can help attackers to evade detection.[/subscribe_to_unlock_form]
Summary:
Recently, researchers discovered an ongoing GuLoader malware campaign, having a huge impact on the South Korean and American e-commerce industries.GuLoader is a sophisticated shellcode downloader known for employing anti-analysis techniques to avoid detection and obstruct reverse engineering. The malspam activity is significant for changing from Microsoft Word documents containing malware to NSIS executable files for malware loading.NSIS, or Nullsoft Scriptable Install System, is a script-driven open source tool for creating Windows installers. Including malicious executable files in archives and images can help attackers to evade detection.[emaillocker id="1283"]
Threat Profile:
References:
The following reports contain further technical details:
https://thehackernews.com/2023/02/guloader-malware-using-malicious-nsis.html
[/emaillocker]