LegionLoader Malware Downloader Resurfaces with 2,000+ New Samples

LegionLoader is distributed as an MSI (Microsoft Installer) file, requiring user interaction for execution. The VT detection rate for these MSI files varies between 3 and 9 out of 60, suggesting that the malware is designed to evade antivirus.