malware🌐InternationalThe Hacker News
Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware
Friday, December 19, 2025
What
A new campaign leverages cracked software downloads to distribute CountLoader, which then installs additional malware, including an information stealer.
Where
International, targeting users downloading cracked software globally.
When
The CountLoader has been detected since at least June 2025, with the current campaign being reported recently.
Key Factors
- •CountLoader uses cracked software sites as a distribution vector.
- •It establishes persistence by creating a scheduled task mimicking Google.
- •The malware can propagate via removable USB drives and execute payloads in memory.
Takeaways
- →Organizations should enhance their defenses against malware distributed through cracked software.
- →The evolution of CountLoader underscores the need for continuous monitoring of emerging malware techniques.
- →Implementing layered security strategies can help mitigate risks from sophisticated malware campaigns.
Read Full Article
Opens original article on The Hacker News
