TLDR InfoSec · MISCELLANEOUS

COFFEELOADER PRETENDS TO BE ASUS SOFTWARE TO STEAL YOUR DATA

links.tldrnewsletter.com3 min read

Summary from the TLDR InfoSec newsletter

Zscaler researchers have discovered a new malware family, CoffeeLoader, active since September 2024. It masquerades as the ASUS Armoury Crate utility and delivers an infostealer like Rhadamanthys using sophisticated evasion techniques such as GPU code execution, stack spoofing, and sleep obfuscation.