Gootloader Malware Maintains Low Detection Rate While Bypassing Most Security Tools

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Gootloader Malware Resurfaces with Advanced Evasion Techniques Gootloader malware has reemerged as a significant threat, returning in November 2025 with enhanced capabilities to evade detection by security tools. The malware utilizes sophisticated evasion techniques, including exploiting malformed ZIP archives and obfuscation mechanisms, and operates as an initial access broker for ransomware attacks, facilitating entry points for other threat actors. 3 sources 48