Threat Research

Rhadamanthys malware has evolved considerably, showcasing continuous advancements in cybercriminal tactics. Initially discovered in 2022, it began as a sophisticated information stealer targeting credentials, financial data, and system details....

"ALCATRAZ Obfuscated DOUBLELOADER Backdoor" is a technical analysis detailing a newly identified malware family called DOUBLELOADER, observed in conjunction with the RHADAMANTHYS infostealer. The malware is notable for using ALCATRAZ, an open-source obfuscator originally from the game hacking community but now adopted in cybercrime and targeted attacks....

A new loader has been identified leveraging the Pascal scripting engine in Inno Setup. It is used to distribute infostealers such as LummaC2, DeerStealer, Rhadamanthys, and StealC. Typically spread via fake application websites, the loader features anti-VM capabilities, XOR-based string encryption, and retrieves payloads from TinyURL using an authentication token....