NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection

Cybersecurity researchers at Kaspersky have uncovered a highly sophisticated infection chain targeting government organizations across Asia. The campaign specifically targets a custom Windows 10 build used exclusively by government entities in the region. The threat involves deployment of a previously undocumented .NET assembly-loading framework codenamed NetamLoader. The malware uses .NET injection techniques to compromise systems. The targeting of government-exclusive Windows builds suggests a focused, potentially state-sponsored or advanced threat actor operation. The sophistication of the infection chain indicates significant resources and planning behind the campaign. This represents a novel malware family not previously documented in public threat intelligence.