Enhanced pkr_mtsi Malware Loader Distributes Multiple Payloads

Enhanced pkr_mtsi Malware Loader Distributes Multiple Payloads

First seen 8 Jan 2026, 18:48 UTC •Infosecurity-MagazineScworld •82% similarity •43.9

Article Content

Browse articles
ThreatCluster

The pkr_mtsi malware loader has been upgraded to incorporate advanced stealth techniques, including hashed API resolution and improved obfuscation. Initially observed in April 2025, it is utilized for deploying various payloads through counterfeit software installers, impacting users through malvertising and SEO-poisoning campaigns.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Oyster Supper Vanguard Stealer Vidar Windows Malware Trojan Pkr_mtsi Regsvr32 Microsoft Teams Putty Regsvr32.exe Rufus