C2Looper Malware — Analysis, Campaigns & Threat Activity

Related Threat Clusters

• C2Looper Backdoor Exploits GitHub for Command-and-Control Operations

  In July 2026, Zscaler ThreatLabz identified C2Looper, a Rust-based backdoor likely linked to ransomware actors. The malware employs a multi-stage ClickFix infection chain and utilizes GitHub repositories for…

  2 articles · Updated August 18, 2026

Recent Intelligence Reports

• C2Looper v2 Uses GitHub Repositories as Full Command-and — Gbhackers · August 18, 2026
• C2Looper Backdoor Uses GitHub for C2 | ThreatLabz - Zscaler, Inc. — Zscaler · August 17, 2026

Related Entities