Malware
SilentRunLoader
- First Reported
- Jun 3, 2026
- Latest Reported
- Jul 17, 2026
Reported Context (4)
- is a highly sophisticated cybercriminal group that rapidly shifted between Atlas RAT, RomulusLoader, SilentRunLoader, and ValleyRAT (Winos4.0) while expanding campaigns from nearby regions into parts of Europe and TA4922 Campaigns Expand Into Europe and Africa, Investigation Finds
- At the end of March, the group targeted UK organizations with the SilentRunLoader Python‑based loader and stealer to exfiltrate credentials, cookies, and browsing information from Google Chrome. Proofpoint Reports TA4922 Expanding Campaigns and Malware Use
- A Chinese-speaking cybercrime group tracked as TA4922 has expanded operations into Europe, using new malware such as Atlas RAT, RomulusLoader, and SilentRunLoader alongside localized phishing lures. TA4922 Expands Into Europe With Atlas RAT and New Malware Loaders
- Chinese-speaking threat actor that has evolved its toolkit to include Atlas RAT, RomulusLoader, SilentRunLoader, and ValleyRAT/Winos4.0 while using regional HR, payroll, tax, and invoicing lures to target Proofpoint Details TA4922’s Expanding Malware Campaigns
Malware (5)
Threat Actors (1)
MITRE ATT&CK (23)
Products (8)
Tools (4)
Countries (11)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.