What is FakeBat?

FakeBat is a loader malware in MSI format, sold as Malware-as-a-Service and known for its anti-detection features, widely distributed through malvertising and fake browser updates using the drive-by download technique.

Sold as Malware-as-a-Service (MaaS) to a limited number of customers, FakeBat was one of the most widespread loaders using the drive-by download technique during the first semester of 2024. It’s commonly used to distribute loaders such as IcedID, Lumma, Redline, SmokeLoader, SectopRAT…