Bumblebee Loader
Loader for ransomware gangs
Source Attribution
- Origin
- MITRE
- Source
- Proofpoint reports
- Verified
- 2026-08-26T16:07:01.550Z
- Confidence
- high
Source: Proofpoint reports · Verified: 2026-08-26T16:07:01.550Z · Confidence: high
Security Timeline
- discovered Bumblebee Loader first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
Bumblebee is a phishing-delivered loader believed linked to TrickBot ecosystem clusters. (attributes recorded from Proofpoint reports).
Definition
Bumblebee is a phishing-delivered loader believed linked to TrickBot ecosystem clusters.
Overview
Bumblebee is a phishing-delivered loader believed linked to TrickBot ecosystem clusters.
Behavior
- Excel/ISO phishing
- loads Bazar/Cobalt Strike
First Seen
2022-03
Target
Loader for ransomware gangs
Malware Intelligence
Family: Bumblebee Loader
Techniques: T1566, T1105
Targets: Loader for ransomware gangs
Behavior:
- Excel/ISO phishing
- loads Bazar/Cobalt Strike
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.