Tag: loader-as-a-service

2 Attack Reports | 0 Vulnerabilities

Attack reports

Brazilian Caminho Loader Employs LSB Steganography and Fileless Execution to Deliver Multiple Malware Families Across South America, Africa, and Eastern Europe

A new malware loader called Caminho, originating from Brazil, has been identified using steganography to hide .NET payloads in image files hosted on legitimate platforms. Active since March 2025, the campaign has evolved significantly, delivering various malware types across South America, Africa, …
xworm
steganography
africa
brazil
remcos rat
fileless execution
eastern europe
katz stealer
south america
loader-as-a-service
2025-10-22
caminho loader
Published: October 22, 2025
Downloadable IOCs: 0

Botnet Loader-as-a-Service Infrastructure Distributing RondoDoX and Mirai Payloads

A sophisticated botnet operation employing a Loader-as-a-Service model was uncovered through exposed command and control logs spanning six months. The campaign systematically targets SOHO routers, IoT devices, and enterprise applications through command injection vulnerabilities in web interfaces. …
command injection
iot
botnet
mirai
cryptomining
soho routers
rondodox
2025-09-25
morte
CVE-2012-1823
CVE-2019-17574
CVE-2019-16759
loader-as-a-service
Published: September 25, 2025
Linked vulnerabilities : CVE-2019-17574, CVE-2019-16759, CVE-2012-1823
Downloadable IOCs: 341
Click here to see more Attack Reports