{"id":37474,"date":"2023-02-02T20:43:41","date_gmt":"2023-02-02T20:43:41","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2023\/02\/02\/malvertising-attacks-are-distributing-net-malware-loaders-the-register\/"},"modified":"2023-02-02T20:44:53","modified_gmt":"2023-02-02T20:44:53","slug":"malvertising-attacks-are-distributing-net-malware-loaders-the-register","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2023\/02\/02\/malvertising-attacks-are-distributing-net-malware-loaders-the-register\/","title":{"rendered":"Malvertising attacks are distributing .NET malware loaders \u2022 The Register"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

Malvertising assaults are getting used to distribute virtualized .NET loaders which can be extremely obfuscated and dropping info-stealer malware.<\/p>\n

The loaders, dubbed MalVirt, are applied in .NET and use virtualization by way of the reliable KoiVM virtualizing protector for .NET functions, in line with risk researchers with SentinelOne’s SentinelLabs. The KoiVM device helps obfuscate the implementation and execution of the MalVirt loaders.<\/p>\n

The loaders are distributing the Formbook info-stealing malware assortment as a part of an ongoing marketing campaign, the researchers write in a report<\/a> out this week. Formbook and the newer XLoader model include a spread of threats, from keylogging and screenshot theft to stealing credentials and staging addition malware.<\/p>\n

\n