Emmenhtal Loader Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
May 19, 2026
Last Seen
May 19, 2026

Emmenhtal Loader is a malware family tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed May 19, 2026; most recent activity May 19, 2026.

Related Threat Clusters

  • MSHTA Utility Exploited in Ongoing Malware Campaigns

    Bitdefender researchers have identified that the Microsoft HTML Application Host (MSHTA) utility is being actively exploited by cybercriminals to deliver a variety of malware, including infostealers and loaders. Despite…

    8 articles · Updated May 19, 2026

Recent Intelligence Reports

  • Attackers turn ancient Windows utility MSHTA into Swiss Army knife of hacking — Cybernews · May 19, 2026
  • Microsoft's MSHTA Legacy Tool Still Powers Malware Campaigns on Windows — Bitdefender · May 19, 2026
  • Internet Explorer may be dead, but its ghost still runs malware — Csoonline · May 19, 2026

Related Entities

DDoS Malware Phishing CastleLoader Campaign ClipBanker Campaigns CountLoader Campaigns Emmenhtal Loader Campaigns LummaStealer Campaign PurpleFox Campaigns Amatera CastleLoader ClipBanker

CVSS v3.1 Breakdown