S1152 IMAPLoader
malwareEnterpriseplatformsWindows
also known asIMAPLoader
IMAPLoader is a.NET-based loader malware exclusively associated with CURIUM operations since at least 2022. IMAPLoader leverages email protocols for command and control and payload delivery.
01
techniques used (9)
ATT&CK techniques this enables or maps to.
02
used by groups (1)
Threat groups associated with this.
03
source
Where this definition is published.
scry
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan