A previously undocumented modular modular loader has emerged as a lucrative tool for cybercriminals in a variety of campaigns. Researchers say the highly competitive loader, dubbed Buer, is intended for use by actors seeking a turn-key, off-the-shelf solution. The loader has robust geotargeting, system profiling and anti-analysis features and is currently being marketed on underground forums with value-added setup services. It has made an appearance in several malicious email campaigns and via exploit kits, to then download various strains of malware.
Source: https://threatpost.com/buer-loader-underground-markets/150807/