Sign inGet the app

Malware · 2 sources · latest 6h

NetamLoader malware targets custom Windows 10 build used by Asian government bodies

Severity
High
Sources
2

What happened

Kaspersky's GReAT team reported NetamLoader, a .NET and XAML-based loader found in a CAB archive in the Windows update download folder, built for a custom Windows 10 build used only by Asian government bodies. It abuses Microsoft-signed components, patches AMSI, cleans up logs and contacts its C2 server slowly to evade sandboxes and EDR. Kaspersky saw one victim, could not say how the archive was delivered and found no sign that Patch My PC was compromised.

For IT people · Written by AI from 2 sources · Wrong?

Read the full story at the sourceAsk about this story

Full story timeline · 2 updates

  1. Fri 30 OctoberHackers target government Windows systems in Asia with new malwareThe Record
  2. APT Hackers Use NetamLoader Malware to Target Windows 10 Systems in Asian GovernmentsCyber Security News

Who reported · 2 outlets

The RecordCyber Security News

Report a problem

NetamLoader malware targets custom Windows 10 build used by Asian government bodies · RedTeamDaily