Foul Language: WordlistLoader Disguises Malware as Ordinary Text

Summary

Threat actors are employing a novel technique called WordlistLoader, which disguises malicious payloads as ordinary text files to bypass security defenses. This method is being used in ClickFix-style campaigns to distribute Amatera, a rapidly growing infostealer. The loader's ability to mimic legitimate text content makes it particularly challenging to detect.

Entities