CloudTrex BlogNotes on cyber security, threat intelligence and cloud defence from the team behind ThreatFeed.https://blog.cloudtrex.eu/enSmartLoader: Lua-based malware delivered through cloned GitHub repositorieshttps://blog.cloudtrex.eu/smartloader-lua-malware-cloned-github-repos/https://blog.cloudtrex.eu/smartloader-lua-malware-cloned-github-repos/Stage-by-stage analysis of a SmartLoader campaign: cloned GitHub repos, a renamed LuaJIT runtime, EtherHiding C2 on Polygon, and a stealer that bypasses Chrome App-Bound Encryption.Fri, 04 Sep 2026 00:00:00 GMTMalware AnalysisSmartLoaderGitHubEtherHidingInfostealer