XLoader Malware Uses LuaJIT and Injection to Hide Credential Stealer
The loader hides the credential stealer inside an embedded LuaJIT interpreter and moves it into another Windows process through shared-section injection.
75
Malware
XLoader
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenNov 4, 2026
- Last mentioned5d ago
Timeline
2 articles · newest firstXLoader Malware Uses LuaJIT and Injection to Hide Credential Stealer
The loader hides the credential stealer inside an embedded LuaJIT interpreter and moves it into another Windows process through shared-section injection.
75
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.