GootLoader
SLOWPOUR
According to PCrisk, they discovered GootLoader malware while examining legitimate but compromised websites (mainly websites managed using WordPress). It was found that GootLoader is used to infect computers with additional malware. Cybercriminals using GootLoader seek to trick users into unknowingly downloading and executing the malware by disguising it as a document or other file. Source: MISP
Activity on Jábega · 12 weeks
1 stories · first seen on 12 Nov 2026 · last seen on 12 Nov 2026
News
Appears alongside
MITRE ATT&CK techniques
Resource Development
Execution
T1059.001PowerShell 40 Sigma rulesT1059.007JavaScript 26 Sigma rulesT1204.001Malicious Link 4 Sigma rules
Persistence
Privilege Escalation
Discovery
T1016System Network Configuration Discovery 4 Sigma rulesT1069.002Domain Groups 13 Sigma rulesT1082System Information Discovery 18 Sigma rulesT1497.003Time Based ChecksT1614System Location Discovery 2 Sigma rulesT1614.001System Language Discovery 2 Sigma rules
Command and Control
Stealth
Relationships come from co-occurrence in the news, not attribution. Sources: MISP galaxy, MITRE ATT&CK and SigmaHQ. attack.mitre.org ↗ malpedia.caad.fkie.fraunhofer.de ↗