Skip to content
MalwareWiki

Loader

BaoLoader

According to Expel, the developers behind the recent AppSuite-PDF and PDF Editor campaigns have used at least 26 code-signing certificates over the last seven years to make their software appear legit

BaoLoader is a Windows loader.

Background

Expel reports that the actors driving the recent AppSuite-PDF and PDF Editor campaigns have leveraged no fewer than 26 code-signing certificates over the past seven years to give their software a legitimate appearance. Based on differences in usage and certificate clustering, researchers consider this malware distinct from both Chromeloader and TamperedChef.

Source: Malpedia (Fraunhofer FKIE).