Alerts
Events
DCR
Explore Cyware Products
Alerts
Events
DCR
Go to listing page
Phishing Emails Distribute GuLoader by Impersonating an International Shipping Company
Malware and Vulnerabilities
March 25, 2025
ASEC Ahn Lab
The emails demand users open attachments that combine VBScript with PowerShell scripts, downloading files from external sources like planachiever.au and tripplebanks.duckdns.org.
Read More
Shipping Company
PowerShell Scripts
VBScript
GuLoader
XWorm RAT
Publisher
Previous
Google Fixed the First Actively Exploited Chrome Zero-D ...
Malware and Vulnerabilities
Next
New Android Malware Campaigns Evading Detection Using C ...
Malware and Vulnerabilities
/https://cyware-ent.s3.amazonaws.com/image_bank/f198_shutterstock_1156765912.jpg)
/https://cyware-ent.s3.amazonaws.com/image_bank/0e95_shutterstock_2272706843.jpg)
