CybercrimeFinancial
D3F@ck Loader
D3F@ck Loader is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 16 MITRE ATT&CK techniques.
- Techniques
- 16
- Exploited CVEs
- No CVE data
- Record updated
How They Operate · MITRE ATT&CK.
16 techniques across 7 of 14 tacticsReconnaissance4
T1012
Query Registry
Query Registry
T1057
Process Discovery
Process Discovery
T1071.001
Application Layer Protocol: Web Protocols
Application Layer Protocol: Web Protocols
T1082
System Information Discovery
System Information Discovery
Resource Development·
Initial Access4
T1189
Drive-by Compromise
Drive-by Compromise
T1204.001
User Execution: Malicious Link
User Execution: Malicious Link
T1204.002
User Execution: Malicious File
User Execution: Malicious File
T1566.002
Phishing: Spearphishing Link
Phishing: Spearphishing Link
Execution1
T1059.001
Command and Scripting Interpreter: PowerShell
Command and Scripting Interpreter: PowerShell
Persistence1
T1547.001
Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder
Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder
Privilege Escalation·
Defense Evasion4
T1027
Obfuscated Files or Information
Obfuscated Files or Information
T1036.003
Masquerading: Rename Legitimate Utilities
Masquerading: Rename Legitimate Utilities
T1562.001
Impair Defenses: Disable or Modify Tools
Impair Defenses: Disable or Modify Tools
T1573.001
Encrypted Channel: Symmetric Cryptography
Encrypted Channel: Symmetric Cryptography
Credential Access·
Discovery·
Lateral Movement·
Collection·
Command and Control·
Exfiltration1
T1041
Exfiltration Over C2 Channel
Exfiltration Over C2 Channel
Impact1
T1499
Endpoint Denial of Service
Endpoint Denial of Service
Arsenal · Malware And Tools.
- CrashFix extensionmalware
- ModeloRATmalware
- finger.exetool
- PowerShelltool
- uBlock Origin Litetool
Campaigns.
- CrashFix
About D3F@ck Loader.
A loader historically linked to TA866.
Last updated Jul 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.