Related Threat Clusters
-
ClearFake Campaigns Utilize WordlistLoader to Distribute Amatera Infostealer
A new malware campaign identified as ClearFake employs a loader named WordlistLoader to deploy the Amatera infostealer, targeting Windows users. This loader reconstructs shellcode from encoded English words, enhancing…
6 articles · Updated August 21, 2026 -
MSHTA Utility Exploited in Ongoing Malware Campaigns
Bitdefender researchers have identified that the Microsoft HTML Application Host (MSHTA) utility is being actively exploited by cybercriminals to deliver a variety of malware, including infostealers and loaders. Despite…
8 articles · Updated May 19, 2026 -
Amatera Infostealer Campaign Uses Fake CAPTCHA and App-V Scripts
A new campaign is distributing the Amatera infostealing malware by employing a fake CAPTCHA method alongside a signed Microsoft Application Virtualization (App-V) script. This attack utilizes legitimate Microsoft…
2 articles · Updated January 27, 2026 -
GoFlateLoader Malware Loader Distributes Multiple Infostealers
GoFlateLoader, a Golang-based malware loader, is being used to deliver various infostealers, including Lumma, Vidar, StealC, Amatera, and Remus. Its design is simple, employing a manual PE loader without advanced…
2 articles · Updated June 11, 2026
Recent Intelligence Reports
- ClearFake Campaigns Use WordlistLoader to Deploy Amatera — Socprime · August 21, 2026
- GoFlateLoader Hides Infostealers in Massive PE Overlay — Gbhackers · June 11, 2026
- Hackers Abuse MSHTA Legacy Windows Tool to Deliver LummaStealer and Amatera Malware — Cybersecuritynews · May 20, 2026
- Hackers Exploit MSHTA to Deploy LummaStealer and Amatera Malware — Gbhackers · May 20, 2026
- Attackers turn ancient Windows utility MSHTA into Swiss Army knife of hacking — Cybernews · May 19, 2026
- Microsoft's MSHTA Legacy Tool Still Powers Malware Campaigns on Windows — Bitdefender · May 19, 2026
- Internet Explorer may be dead, but its ghost still runs malware — Csoonline · May 19, 2026
- New ClickFix attacks abuse Windows App — Bleepingcomputer · January 26, 2026