XLoader password stealer hidden in fake business order emails
MALWAREXLoaderredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A malware campaign uses fake business order and quote emails to deliver XLoader, a password stealer. A hidden script in the attachment loads the malware into a trusted Windows program, which then takes saved passwords and browser cookies and sends them to attackers.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Block JavaScript files inside RAR and ZIP attachments at the mail gateway.
- Treat archives containing script files as suspicious, even when they reference a real-looking order number.
- Fully reset browser and email passwords on any machine that may be infected.
- Patch old Office flaws such as the Equation Editor vulnerability.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News