Netskope Threat Labs

Bumbleloader

ATP Sandbox Adv. Heuristics

Bumbleloader is a detection name for variants of the BumbleBee malware loader, a delivery tool active since 2022. Variants detected under this name follow the family's established pattern of arriving through phishing attachments and downloading follow on payloads such as remote access trojans and information stealers. The continuous mutation of its code base reflects an operation that invests heavily in evading antivirus detection.

First seen
August 2022
Last seen
October 2026
BumbleLoader
Alert Name
Document-Office.Trojan.Bumbleloader
Document-Word.Trojan.Bumbleloader
Shortcut.Trojan.Bumbleloader
Shortcut.Trojan.BumbleLoader
Win32.Trojan.Bumbleloader
Win64.Backdoor.Bumbleloader
Win64.Trojan.Bumbleloader