We are celebrating 15 years — and counting — of stories that are deeply researched and deeply felt, that build a historical record of what the city has been.
As a descendant of the notorious Formbook, XLoader’s goal was clear: information theft.
It copied itself to the APPDATA directory and created a random, 5-12 character registry entry to ensure it ran every time the machine booted.
Sarah watched as the malware reached out, sent the encrypted package—all the credentials of the "finance user"—and then cleared its own trail. It was a "malware-as-a-service" (MaaS) product, costing as little as $49, making it one of the most widespread threats she faced.