Wire Lurker for Windows
Summary: Unit 42 reported that a Windows variant of WireLurker, an older version of the malware, was found after AlienVault's Jaime Blasco identified a Windows executable containing its command-and-control address. The variant was distributed by a Chinese source hosting 180 Windows executables and 67 Mac OS X applications, all containing the Trojan, which were downloaded 65,213 times between March 13 and the report, with 97.7% of downloads being the Windows version.
What you should know: The samples were uploaded to Baidu YunPan by user "ekangwen206" over a month before the Maiyadi App Store infections, and the iOS malware's update check pointed at the Maiyadi domain, leading Unit 42 to suspect a close relationship between Maiyadi and WireLurker's creator.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026