VERY IMPORTANT

This article focuses on the newly released BunnyLoader 3.0 malware, its capabilities, and historically observed infrastructure. BunnyLoader is dynamically developing malware that can steal information, credentials, cryptocurrency, and deliver additional malware. The threat actor frequently changes tactics to evade detection and undermine analysis. On Feb. 11, 2024, the threat actor announced BunnyLoader 3.0 with claimed enhancements. Samples show major changes like modularization and updated C2 communication. Revealing evolving tactics empowers defense against this threat.