MALWARE-CNC Win.Trojan.BazarLoader outbound connection

IPS-SWG

1 SID: 58852

Description

Detects malicious activity associated with Win.Trojan.BazarLoader, a Windows malware family.

Related malware families

Related blogs

Microsoft’s Macro Reversal Invites a Resurgence of Office Malware

Microsoft’s Macro Reversal Invites a Resurgence of Office Malware

July 8, 20221 min read

Microsoft Office: VBA Blocked By Default in Files From the Internet

Microsoft Office: VBA Blocked By Default in Files From the Internet

February 24, 20227 min read

Infected PowerPoint Files Using Cloud Services to Deliver Multiple Malware

Infected PowerPoint Files Using Cloud Services to Deliver Multiple Malware

January 24, 20227 min read

Malicious Office Documents: Multiple Ways to Deliver Payloads

Malicious Office Documents: Multiple Ways to Deliver Payloads

November 19, 20214 min read

Cloud Threats Memo: Scary Examples of Weaponizing Google Drive

November 18, 20213 min read

Cloud Threats Memo: BazarLoader Exploiting Popular Cloud Services

October 25, 20212 min read

SquirrelWaffle: New Malware Loader Delivering Cobalt Strike and QakBot

SquirrelWaffle: New Malware Loader Delivering Cobalt Strike and QakBot

October 7, 20216 min read

BazarLoader: Using LoLBins through Office Documents to Deliver Payloads

BazarLoader: Using LoLBins through Office Documents to Deliver Payloads

September 22, 20214 min read

Cloud Threats Memo: Malicious Campaigns Taking Advantage of Well-known Collaboration Apps

April 20, 20211 min read

Netskope Threat Coverage: EtterSilent

Netskope Threat Coverage: EtterSilent

April 14, 20212 min read