Pronsis Loader
- First seen
- 2023-01-01 00:00:00
- Malware type
- loader, downloader
- Family
- Malware family
- Profile updated
- 2026-07-07 14:05:32
Targeted industries: financial-services technology-and-telecommunications
Context
According to TrustWave, this is a loader leveraging JPHP, which was observed fetching Latrodectus and Lumma.
Reports & references
- cloud.google.com — Russian Espionage Influence Ukrainian Military Recruits Anti Mobilization Narratives (report)
- cloud.google.com — Russian Espionage Influence Ukrainian Military Recruits Anti Mobilization Narratives (report)
- malpedia.caad.fkie.fraunhofer.de — Jar.Pronsis Loader (report)
- trustwave.com — Pronsis Loader A Jphp Driven Malware Diverging From D3Fck Loader (report)