Back Cybersecuritynews

GuLoader Uses Polymorphic Code and Trusted Cloud Hosting to Evade Reputation

Cybersecuritynews •Tushar Subhra Dutta • February 10, 2026

GuLoader, also known as CloudEyE, has solidified its position as a persistent threat in the cybersecurity landscape since its emergence. Primarily functioning as a sophisticated downloader, it is designed to retrieve and execute secondary malware payloads, such as the Remcos Remote Access Trojan (RAT) and information stealers like Vidar and Raccoon Stealer. This malware has […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GuLoader Exploits Polymorphic Code and Cloud Hosting for Malware Delivery GuLoader, also known as CloudEyE, has become a persistent threat in cybersecurity, functioning primarily as a downloader for secondary malware payloads. It retrieves and executes various malicious software, including the Remcos Remote Access Trojan and information stealers like Vidar and Raccoon Stealer, utilizing polymorphic code and trusted cloud infrastructure to evade detection. 2 sources 33

GuLoader Uses Polymorphic Code and Trusted Cloud Hosting to Evade Reputation

The full story

Extracted Entities

Attack Types (1)

Malware (3)