Alleged Sale of Matanbuchus 3.0 Malware Loader

⚠ Disclaimer

This report includes actual screenshots and/or text that may include unredacted personally identifiable information (PII) gathered from publicly available sources. The sensitive information presented within this report is intended solely for cybersecurity awareness and threat intelligence purposes. Dark Web Informer explicitly condemns unauthorized access, distribution, or misuse of the personal data displayed or referenced here. Users must treat exposed data responsibly and ethically.

📌 Overview

On July 7, 2025, a known seller under the alias BelialDemon advertised Matanbuchus 3.0 for rent on a popular dark web malware forum. This version is described as a complete rewrite of the previously known Matanbuchus loader, offering advanced delivery and obfuscation features. According to the actor, this iteration features a fully reengineered codebase, a revamped control panel, expanded execution formats, and enhanced traffic and bot management.

📊 Key Details