TLDR InfoSec · MISCELLANEOUS
COFFEELOADER PRETENDS TO BE ASUS SOFTWARE TO STEAL YOUR DATA
Summary from the TLDR InfoSec newsletter
Zscaler researchers have discovered a new malware family, CoffeeLoader, active since September 2024. It masquerades as the ASUS Armoury Crate utility and delivers an infostealer like Rhadamanthys using sophisticated evasion techniques such as GPU code execution, stack spoofing, and sleep obfuscation.