A previously undocumented loader has been discovered in several recent malware campaigns and being sold on underground markets.
Source: Threadpost