New Malware-as-a-Service Threat Emerges in the Cybercrime Underground

BunnyLoader, a new malware-as-a-service (MaaS) threat, has been discovered by cybersecurity experts. Being sold on the dark web, this malware has diverse capabilities, including downloading payloads, stealing browser credentials, and replacing cryptocurrency wallet addresses. The developer, known as PLAYER_BUNNY, has been continuously updating its features since its debut on September 4, 2023, now including an fileless loading feature that challenges antivirus detection.