Guest Michael DeBolt from Intel 471 joins Dave Bittner on this episode to discuss one of the most popular commodity malware loaders on the underground \u2013 PrivateLoader. The blog provides an analysis of campaigns since May 2021, full details on a Pay-per-install (PPI) malware service, the methods operators employ to obtain \u201cinstalls,\u201d and insights on the malware families the service delivers.\nOn Intel 471's blog, it shows the breakdown of how the PrivateLoader download is delivered and how it works. The blog states "Visitors are lured into clicking a \u201cDownload Crack\u201d or \u201cDownload Now\u201d button to obtain an allegedly cracked version of the software." Michael explains more about this popular commodity malware loader.\nThe research can be found here:\nPrivateLoader: The first step in many malware schemes\n\nLearn more about your ad choices. Visit megaphone.fm/adchoices