Foul Language: WordlistLoader Disguises Malware as Ordinary Text

A new tactic is being used by ClickFix-style threat campaigns to avoid detection and deliver the Amatera infostealer. This method involves disguising malware as ordinary text, utilizing a tool called WordlistLoader. The Amatera infostealer is becoming increasingly common, suggesting a growing threat. The use of WordlistLoader allows the malware to blend in with legitimate files, making it harder to detect. This evasion technique is a notable development in the ongoing efforts of threat actors to stay under the radar.