xPack

Aliases: NERAPACK

Malware type
loader
Profile updated
2026-07-07 12:42:15

Targeted industries: government-and-public-sector

Targeted regions: country_code:tw

Context

Symantec describes this as a decryptor/loader used by Chinese threat actor Antlion in campaigns targeting Taiwan.

Reports & references

  • Trend Micro — Collecting In The Dark Tropic Trooper Targets Transportation And Government Organizations (report)
  • Broadcom/Symantec — China Apt Antlion Taiwan Financial Attacks (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Xpack (report)
  • thehackernews.com — Chinese Hackers Target Taiwanese (report)

External references