Back to today’s briefing

Story perspectives

New CoffeeLoader Malware Disguised as ASUS Utility Uncovered

3/28/2025

30 2

Summary

Story summary

Cybersecurity experts have uncovered CoffeeLoader, a cunning malware loader disguised as ASUS's Armoury Crate utility. First appearing in September 2024, it utilizes cutting-edge evasion tactics such as GPU-based packing and call stack spoofing. While there are hints of a connection to SmokeLoader, more investigation is required to confirm their ties.

1 of 1

Story summary

Cybersecurity experts have uncovered CoffeeLoader, a cunning malware loader disguised as ASUS's Armoury Crate utility. First appearing in September 2024, it utilizes cutting-edge evasion tactics such as GPU-based packing and call stack spoofing. While there are hints of a connection to SmokeLoader, more investigation is required to confirm their ties.