New Malware Families WordlistLoader and SynkLoader Target Windows Systems with Advanced Evasion Techniques

Cybersecurity researchers identified WordlistLoader, which delivers Amatera Stealer through ClickFix campaigns using EtherHiding and WebDAV techniques, while SynkLoader targets Windows credentials via Microsoft Teams phishing. Both malware families employ advanced evasion methods like hardware-breakpoint bypasses and obfuscation to avoid detection.

Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoader that's used to deliver next-stage payloads and likely sell access to ransomware groups.

According to findings from Gen Digital, WordlistLoader is being used to deliver Amatera Stealer (aka ACR Stealer or AcridRain Stealer) via ClearFake campaigns, which employ the ClickFix (aka FakeCaptcha)

Read original article