This campaign has been running since mid-September 2021. In this blog, we will be analyzing the complete attack chain for this new malware family (as shown in Figure 1). Zscaler ThreatLabz has been following an emerging new malware loader known as Squirrelwaffle that is being used to deliver Cobalt Strike.