- May 4, 2019
- 825
The Cyberint Research Team, which discovered the malware, said it's distributed in the form of malicious installers for legitimate applications targeting Korean and Chinese speakers.
There is evidence pointing to UULoader being the work of a Chinese speaker due to the presence of Chinese strings in program database (PDB) files embedded within the DLL file.
New UULoader Malware Distributes Gh0st RAT and Mimikatz in East Asia
New UULoader malware targets Korean and Chinese users with Gh0st RAT; phishing scams target cryptocurrency wallets and AI users.
thehackernews.com