Malware Hunters ∘ BazarLoader

BazarLoader

Nov. 17, 2022 ∘ 79 days ago

Loader Trojan Backdoor

BazarLoader is a trojan with backdoor and loader functions used by TrickBot botnet operators to bypass security solutions and increase the effectiveness of malicious campaigns to infect systems against the background of frequent TrickBot detections.

It is actively used to download the Conti ransomware program to infected systems, previously downloaded the Ryuk trojan.

The BazarLoader trojan was first discovered in April 2020.

Aggression

Activity dynamics

Malicious infrastructure growth dynamics

Countries where most part of the malicious infrastructure is located

Malicious infrastructure map

Malicious infrastructure rose

Extensions of captured samples