XLoader campaign hides credential stealer using LuaJIT and Windows process injection
MALWAREAgent Teslaredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A new XLoader infection chain conceals the credential stealer within an embedded LuaJIT interpreter and injects it into another Windows process via shared-section injection. Delivery uses business-themed email lures, including order and payment messages, with one Greek-language example. The same campaign has also delivered Agent Tesla, Remcos and XWorm. The article names no CVEs or affected versions.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- No action needed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers