Sophisticated Ragnar Loader Malware Kit Used by Cybercrime Groups

Threat hunters have revealed the existence of a sophisticated and evolving malware kit called Ragnar Loader, used by various cybercrime and ransomware groups such as Ragnar Locker (alias Monstrous Mantis), FIN7, FIN8, and Ruthless Mantis (formerly REvil). Ragnar Loader plays a key role in maintaining access to compromised systems, helping attackers stay within networks for long-term operations. This loader enables cybercriminals to maintain persistent access, thereby facilitating their malicious activities.