October 1, 2026
- 2CLoader, a loader Zscaler ThreatLabz identified in August 2026, distributes Vidar, Remus and XWorm using indirect syscalls, anti-analysis checks and Windows API hooking; the write-up covers configuration, payload decryption and C2 (Zscaler). · Threat Intelligence
in An Encoded Character Away From Admin: Cisco SD-WAN Manager Exploited in the Wild