Analysis: Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware

CountLoader and GachiLoader Malware: A Growing Threat in North East India

Cybersecurity researchers have recently unveiled a new campaign involving the use of cracked software distribution sites to spread a new version of the modular and stealthy CountLoader malware. This development underscores the need for increased vigilance against such threats in the North East region of India.

The CountLoader Campaign

The CountLoader campaign uses the loader as the initial tool in a multi-stage attack, aiming at access, evasion, and delivery of additional malware families. First detected in the wild since June 2025, CountLoader has been linked to various payloads such as Cobalt Strike, AdaptixC2, PureHVNC RAT, Amatera Stealer, and PureMiner.

Connection to the North East Region

The North East region, like any other part of India, is not immune to such threats. The region's growing digital footprint and increasing reliance on software make it a potential target for malware distribution. Users are advised to download software only from trusted sources.

GachiLoader: A Conduit for Rhadamanthys and Other Malware

GachiLoader, another malware, has been found to serve as a conduit for the Rhadamanthys information stealer malware. Like CountLoader, it deploys additional payloads to an infected machine while performing anti-analysis checks to evade detection.

GachiLoader's Techniques and Implications

GachiLoader's creators demonstrate proficiency with Windows internals, using a new variation of a known technique. This highlights the need for security researchers to stay updated with malware techniques and proactively look for new ways in which malware authors try to evade detection.

Protecting Yourself from Malware

To protect yourself, it is essential to keep your system updated, install antivirus software, and avoid downloading software from unverified sources. Be wary of unsolicited emails or messages containing links or attachments. Always verify the authenticity of the software before downloading.

The Broader Indian Context

As India's digital economy expands, so does the threat landscape. Cybercrime is a growing concern across the country, and it is crucial for all regions, including the North East, to be vigilant and proactive in protecting their digital assets.