New UULoader Malware Distributes Gh0st RAT and Mimikatz in East Asia
Briefly

from The Hacker News6 months ago
UULoader is embedded in malicious installers for legit apps, focusing on Korean and Chinese speakers, indicating the likely involvement of a native Chinese speaker.
The Hacker Newshttps://thehackernews.com/2024/08/new-uuloader-malware-distributes-gh0st.html
The core files of UULoader are housed in a .cab archive, with executables that exploit DLL side-loading to ultimately deliver harmful payloads like Gh0st RAT.
The Hacker Newshttps://thehackernews.com/2024/08/new-uuloader-malware-distributes-gh0st.html
UULoader often disguises itself as legitimate software updates; for example, it might masquerade as a Chrome update while running a real update as a decoy.
The Hacker Newshttps://thehackernews.com/2024/08/new-uuloader-malware-distributes-gh0st.html
This type of malware operation has precedent, as previous bogus Chrome installers contributed to the spread of Gh0st RAT amongst Chinese Windows users.
The Hacker Newshttps://thehackernews.com/2024/08/new-uuloader-malware-distributes-gh0st.html
Read at The Hacker News
#malware #uuloader #cybersecurity #threat-actors #remote-access-trojan
[
|
]