A new version of the XLoader botnet is implementing a new technique to obscure the Command and Control infrastructure. Researchers from Check Point have discovered a new version of the XLoader botnet, which implements significant enhancements, such as a new technique to obscure the Command and Control infrastructure XLoader has been observed since 2020, it is a very cheap malware strain that is based on the popular Formbook Windows malware.  Check Point experts now state that it is significantly harder to determine the real C2 servers among thousands of legitimate domains used by the operators as a smokescreen.

Read full article on Security Affairs