‘Highly Competitive’ Buer Loader Emerges in Underground Markets

mood · Dec 5, 2019

‘Highly Competitive’ Buer Loader Emerges in Underground Markets
A previously undocumented loader has been discovered in several recent malware campaigns
December 4, 2019
https://threatpost.com/buer-loader-underground-markets/150807/

A previously undocumented modular loader has emerged as a lucrative tool for cybercriminals in a variety of campaigns. Researchers say the “highly competitive” loader, dubbed Buer, is intended for use by actors seeking a turn-key, off-the-shelf solution.

Researchers say they have spotted the loader being actively sold in prominent underground marketplaces since August 2019. Consequently, Buer has made an appearance in several malicious email campaigns and via exploit kits, to then download various strains of malware – from the TrickBot banking trojan to the KPOT information stealer.

“The new loader has robust geotargeting, system profiling and anti-analysis features and is currently being marketed on underground forums with value-added setup services,” said researchers with Proofpoint on Wednesday.
Researchers warn that going forward, Buer’s author is constantly changing the loader, making it a fast-developing threat ripe for future use.
Click to expand...

Proofpoint: Buer, a new loader emerges in the underground marketplace

Log in or Sign up

‘Highly Competitive’ Buer Loader Emerges in Underground Markets

mood Updates Team

APT-C-23 has Re-Emerged on the Front Scene

Underground market of phishing kits is booming, prices skyrocketed in 2019 by 149%

One of the Darknet’s Largest Markets Is Allegedly Pulling an Exit Scam

Emotet remains the dark market leader for delivery-as-a-service

New Legion Loader Delivers a Variety of Malware

Log in or Sign up

‘Highly Competitive’ Buer Loader Emerges in Underground Markets

mood Updates Team

APT-C-23 has Re-Emerged on the Front Scene

Underground market of phishing kits is booming, prices skyrocketed in 2019 by 149%

One of the Darknet’s Largest Markets Is Allegedly Pulling an Exit Scam

Emotet remains the dark market leader for delivery-as-a-service

New Legion Loader Delivers a Variety of Malware

Useful Searches