XLoader Infostealer
Summary
Back in 2016 a keylogger and form-stealer malware named FormBook was first offered for sale on underground hacker forums in a MaaS (Malware-as-a-Service) scheme. Last year, however, Check Point discovered that a newer, more sophisticated malware based on FormBook is being offered for sale on the same hacker forum. The XLoader Infostealer threat is again offered for sale in the form of MaaS with the price going as low as $49. Due to its incredibly straightforward and simple operational needs, even wannabe cybercriminals with extremely basic technical knowledge can get their hands on it and start using a serious malware threat. It should be noted that despite the similar name, the XLoader infostealer has no connection to the XLoader (Roaming, MoqHao) Android malware that acts as a backdoor and employs DNS (Domain Name System) spoofing to spread infected Android applications.
Classifications
AskAI Classifications
LabelsLinked Companies
