Tag: gachiloader

1 Attack Reports | 0 Vulnerabilities

Attack reports

GachiLoader: Defeating Node.js Malware with API Tracing

A new malware distribution campaign utilizing compromised YouTube accounts to spread infostealers has been identified. The campaign employs GachiLoader, a heavily obfuscated Node.js loader, to deploy the Rhadamanthys infostealer. GachiLoader implements anti-analysis techniques and uses a novel PE i…
malware
obfuscation
rhadamanthys
infostealer
anti-analysis
node.js
youtube
2025-12-17
api tracing
gachiloader
kidkadi
pe injection
Published: December 17, 2025
Downloadable IOCs: 10
Click here to see more Attack Reports