WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords

Summary

Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoader that's used to deliver next-stage payloads and likely sell access to ransomware groups. According to findings from Gen Digital, WordlistLoader is being used to deliver Amatera Stealer (aka ACR Stealer or AcridRain Stealer) via ClearFake campaigns, which employ the ClickFix (aka FakeCaptcha)

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.