OnionDrop Loader Uses Nation-State-Grade Evasion to Deliver LegionLoader, CGrabber, and Vidar

The threat intelligence community often reserves its highest scrutiny for targeted, nation-state espionage campaigns. However, commoditized malware operates quietly in the background and is rapidly closing the sophistication gap. A prime example is the newly discovered OnionDrop loader, which employs an evasion architecture that rivals that of purpose-built targeted tooling. The Howler Cell Threat Research Team recently identified this loader, tracking more than 645 unique…

Diamond Model