Dangerous new CoffeeLoader malware executes on your GPU to get past security tools

• Security researchers Zscaler found a new loader used in different infostealing campaigns
• CoffeeLoader uses multiple tricks to bypass security and drop additional payloads
• Interestingly enough, it executes the code on the system’s GPU

Security researchers have found a dangerous new malware loader that can evade traditional endpoint detection and response (EDR) solutions in a clever and concerning way.

Researchers from Zscaler ThreatLabz said they recently observed CoffeeLoader in the wild, describing it as a “sophisticated” malware loader.