ZLoader — Malware Profile

Banking trojan turned malware loader, descended from ZeuS; distributes ransomware precursor payloads.

IntelFusions coverage

• CISA, FBI, and NSA Joint Advisory: Conti Ransomware Surpasses 1,000 Attacks with TrickBot, Cobalt Strike, and Double Extortion 2026-02-16

Attributed threat actors

• TA547 machine-inferred link
• TA544 machine-inferred link

Read the full analysis on IntelFusions