BYOS – Bundle Your Own Stealer

Highlights: Introduction During the past few months, we have been monitoring a new unknown stealer/bot, we dubbed BundleBot, spreading under the radar and abusing dotnet bundle (single-file), self-contained format. This format of dotnet compilation has been supported for about four years, from .net core 3.0+ to dotnet8+, and there are already some known malware families abusing it (e.g., Ducktail). The […]

The post BYOS – Bundle Your Own Stealer appeared first on Check Point Research.

abusing bot bundle check point research publications dotnet file introduction malware monitoring own radar single stealer under under the radar