Skip to content
MalwareWiki

Loader

GootLoader

aka SLOWPOUR

According to PCrisk, they discovered GootLoader malware while examining legitimate but compromised websites (mainly websites managed using WordPress).

GootLoader, also known as SLOWPOUR, is a JavaScript loader operated by Storm-0249.

Background

PCrisk reports having found GootLoader while investigating legitimate but compromised sites, predominantly ones running WordPress. The malware acts as a vehicle for infecting machines with further payloads. Operators distribute it by disguising it as a document or similar file, deceiving users into downloading and running it without realizing.

Source: Malpedia (Fraunhofer FKIE).