XLoader
Form-grabbing stealer successor to Formbook
Source Attribution
- Origin
- MITRE
- Source
- Malwarebytes
- Verified
- 2026-08-26T16:11:50.351Z
- Confidence
- high
Source: Malwarebytes · Verified: 2026-08-26T16:11:50.351Z · Confidence: high
Security Timeline
- discovered XLoader first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
XLoader is the successor to Formbook, expanding form-grabbing to macOS platforms. (attributes recorded from Malwarebytes).
Definition
XLoader is the successor to Formbook, expanding form-grabbing to macOS platforms.
Overview
XLoader is the successor to Formbook, expanding form-grabbing to macOS platforms.
Behavior
- Config-based
- macOS variant
First Seen
2020-10
Target
Form-grabbing stealer successor to Formbook
Malware Intelligence
Family: XLoader
Techniques: T1185, T1105
Targets: Form-grabbing stealer successor to Formbook
Behavior:
- Config-based
- macOS variant
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.