BYOS - Bundle Your Own Stealer
released on 2023-07-20 @ 03:05:32 PM
Check Point Research (CPR) provides an in-depth analysis of the new malware strain dubbed BundleBot spreading under the radar. BundleBot is abusing the dotnet bundle (single-file), a self-contained format that results in very low or no static detection at all. Commonly distributed via Facebook Ads and compromised accounts leading to websites masquerading as regular program utilities, AI tools, and games.