New Malware-as-a-Service Threat Emerges in the Cybercrime Underground

Cybersecurity experts at Zscaler ThreatLabz discovered a malware-as-a-service (MaaS) threat named BunnyLoader, available for sale on the cybercrime underground network for $250 for a lifetime license. BunnyLoader can download and execute payloads, steal browser credentials and system information. It has fileless loading and anti-detection features. The malware also captures keystrokes, monitors clipboard content, and can replace cryptocurrency wallet addresses. The initial access mechanism for BunnyLoader is yet unknown.