“`html
Threat entities connected to the Qilin ransomware group have utilized malware referred to as SmokeLoader, combined with an unreported .NET compiled loader nicknamed NETXLOADER, during a campaign detected in November 2024.
“NETXLOADER serves as a novel .NET-based loader that is essential in cyber assaults,” noted Trend Micro researchers Jacob Santos, Raymart Yambot, John Rainier Navato, Sarah Pearl.
“`