XLoader Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
13
occurrences
First Seen
November 3, 2025
Last Seen
July 23, 2026

XLoader is a malware family tracked across 9 threat clusters and 13 intelligence report mentions on ThreatCluster. First observed November 3, 2025; most recent activity July 23, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • T1539 — attack.mitre.org · July 23, 2026
  • Unpacking “Cruciferra”: An Analysis of a Sophisticated Crypter Service — Proofpoint · July 20, 2026
  • 012 — attack.mitre.org · July 1, 2026
  • T1203 · Exploitation for Client Execution — attack.mitre.org · June 8, 2026
  • T1422 — attack.mitre.org · April 16, 2026
  • 001 — attack.mitre.org · April 16, 2026
  • XLoader Malware Upgrades Obfuscation Tactics and Hides C2 Traffic Behind Decoy Servers — Cybersecuritynews · April 1, 2026
  • XLoader malware Sharpens Obfuscation, Masks C2 Traffic via Decoy Servers — Gbhackers · April 1, 2026

CVSS v3.1 Breakdown