WordlistLoader

New WordlistLoader and SynkLoader Malware Families Target Windows Users

Researchers at Gen Digital have identified two new malware families, WordlistLoader and SynkLoader, that are being used to deliver next-stage payloads and potentially sell access to ransomware groups. WordlistLoader is linked to ClearFake campaigns using ClickFix (FakeCaptcha) to distribute Amatera Stealer, while SynkLoader focuses on phishing Windows passwords. The findings highlight evolving social engineering tactics and the growing threat of credential theft.