[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjiLSgo16EBQIHeWLAw_A4uorU5qBVwkaxHbNp1niK-0":3},{"article":4,"iocs":31},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":21,"category":22,"article_tags":25},"3a23c152-9cd2-43e4-99d9-d171901c6a12","Foul Language: WordlistLoader Disguises Malware as Ordinary Text","foul-language-wordlistloader-disguises-malware-as-ordinary-text-0b33dc","ClickFix-style threat campaigns are using a new trick to evade detection and deliver Amatera, an increasingly prevalent infostealer.","Threat actors are employing a novel technique called WordlistLoader, which disguises malicious payloads as ordinary text files to bypass security defenses. This method is being used in ClickFix-style campaigns to distribute Amatera, a rapidly growing infostealer. The loader's ability to mimic legitimate text content makes it particularly challenging to detect.","New WordlistLoader technique disguises malware as text files to deliver Amatera infostealer.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fdata-privacy\u002Fwordlistloader-disguises-malware-ordinary-text","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fbltefcd627d6f4a4bd5\u002F6a8ca1d3f97edfa56696c6b5\u002FSpy_Binoculars-Moor_Studio-GettyImages-2154379866.jpg?width=720&quality=80&disable=upscale","2026-08-24T20:51:27+00:00","2026-08-24T22:00:19.703507+00:00",7,[18],{"name":19,"type":20},"WordlistLoader","technology","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":21,"icon":11,"name":23,"slug":24},"Malware","malware",[26],{"category":27},{"id":28,"icon":11,"name":29,"slug":30},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[]]