Buer

Also known as: Buerloader, RustyBuer

Buer is a downloader sold on underground forums and used by threat actors to deliver payload malware onto target machines. It has been observed in email campaigns and has been sold as a service since August 2019.

Last 7 days

May 24, 2026

C2 Hosts: 3

Daily C2 host counts for the last 7 days
Date	C2 Hosts
May 24, 2026	3

Further Reading

The malware that usually installs ransomware and you need to remove right away

If you see any of these malware strains on your enterprise networks, stop everything you're doing and audit all systems.