INSIDE ZLOADER'S LATEST TRICK: DNS TUNNELING

Summary from the TLDR InfoSec newsletter

Zloader, a malware originally designed for banking trojans, has evolved into a sophisticated ransomware deployment tool. It now uses DNS tunneling, anti-analysis capabilities, and an interactive shell. Zloader attacks have become more targeted, and the malware has been updated with new features to evade detection. A specific variant, "BB3", is linked to Black Basta ransomware operations. Zloader's authors are focused on making the malware more resilient against security controls.