WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
Gen Digital details WordlistLoader delivering Amatera Stealer via ClickFix and EtherHiding, while SynkLoader phishes Windows credentials through Microsoft Teams.
55
Malware
WordlistLoader
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 24, 2026
- Last mentionedAug 26, 2026
Timeline
3 articles · newest firstE4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands
Researchers identified two new RATs, E4del and PINHOLE, using FTP banners as dead drop resolvers to fetch C2 commands via ClickFix-style lures.
55
Foul Language: WordlistLoader Disguises Malware as Ordinary Text
ClickFix-style campaigns deploy WordlistLoader, which disguises malware as ordinary text, to deliver the increasingly prevalent Amatera infostealer.
50
Appears with
- Amatera Stealermalware · 2
- MalwareHunterTeamorganization · 1
- KPMGorganization · 1
- ACR Stealermalware · 1
- Expelvendor · 1
- SOCRADARvendor · 1
- Expelorganization · 1
- Microsoft 365product · 1
- Amateramalware · 1
- Microsoftvendor · 1
- Microsoftorganization · 1
- Gen Digitalvendor · 1
- Gen Digitalorganization · 1
- Microsoft Teamsproduct · 1
- PINHOLEmalware · 1
- E4delmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.