WEL1DROPPER: Cross-Platform Downloader in npm Supply Chain Attack
WEL1DROPPER is a downloader used in a campaign involving nearly 800 malicious npm packages. It identifies the host OS and architecture, then…
Tag: downloader
PUBLOAD Downloader: Initial Vector for FDMTP
PUBLOAD is a downloader used to distribute secondary tools like FDMTP. It was first highlighted by Trend Micro in September 2024 as…
TookPS PowerShell Downloader
TookPS is a PowerShell downloader used as the initial payload for OkoBot. It has been active since March 2025, delivered via fake…
PteroPaste: Gamaredon Weaponizer and Downloader
PteroPaste is used by Gamaredon to weaponize USB drives and download additional PowerShell payloads via an encrypted channel.