Bumblebee Loader Delivers Cobalt Strike, Shellcode, Sliver, and Meterpreter in Multiple Campaigns

Starting in March 2022, Proofpoint observed campaigns delivering a new downloader called Bumblebee. At least three clusters of activity including known threat actors currently distribute Bumblebee.