What is GRAPELOADER malware?

GRAPELOADER is a first-stage malware loader used by APT29 to infect systems, ensure persistence, and deliver payloads like WINELOADER.

Who is APT29 targeting with GRAPELOADER?

APT29 primarily targets European diplomats, focusing on Ministries of Foreign Affairs and embassies, with possible outreach to the Middle East.

The malware is delivered via phishing emails with wine-tasting lures, containing a ZIP archive that triggers DLL side-loading.

GRAPELOADER handles initial infection and persistence, while WINELOADER is a modular backdoor for later-stage attacks.

Train staff on phishing, use endpoint detection, segment networks, monitor anomalies, and keep software updated.

Tag

Articles

Loading Content

$ loading --articles --category="Cyber espionage"

Fetching latest articles...

We couldn't find any articles matching your criteria