Skip to content

Malware

xPack

aka NERAPACK

Symantec describes this as a decryptor/loader used by Chinese threat actor Antlion in campaigns targeting Taiwan.

xPack, also known as NERAPACK, is a Windows malware family operated by Antlion and Pirate Panda.

Background

Symantec has characterized xPack as a loader/decryptor leveraged by the Chinese threat group Antlion during operations aimed at Taiwanese targets.


Source: Malpedia (Fraunhofer FKIE).