WikiLoader
Aliases: WailingCrab
- First seen
- 2022-11-15 00:00:00
- Malware type
- loader
- Family
- Malware family
- Last IoC activity
- 2026-07-22 00:36:47
- Profile updated
- 2026-07-07 15:04:05
Targeted industries: financial-services government-and-public-sector
Context
WikiLoader, also known as WailingCrab, is a malware loader known for its ability to execute follow-on payloads. It's used by threat actors to gain a foothold in a victim's system, often targeting financial services and government sectors.
Reports & references
- securityintelligence.com — Wailingcrab Malware Misues Mqtt Messaging Protocol (report)
- proofpoint.com — Out Sandbox Wikiloader Digs Sophisticated Evasion (report)
- twitter.com — 1712783250446328114 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Wikiloader (report)
- github.com — Wikiloader%20Shellcode%20Pt3.Md (report)
- github.com — Wikiloader%20Shellcode%20Pt2.Md (report)
- twitter.com — 1679864625544978432 (report)
- github.com — Wikiloader%20Notepad.Md (report)