Malware & Threats
The attackers impersonate at least 40 companies and disable 145 security products to deploy infostealer malware.
Hi, what are you looking for?
SecurityWeek
All posts tagged "infostealer"
Cloud Security
A threat actor is claiming the exfiltration of millions of records from McDonald’s, TCS, Vodafone, and other large organizations.
Malware & Threats
The new macOS malware has targeted at least 100 users to steal their passwords and cryptocurrency.
Malware & Threats
A threat actor poisoned several Jscrambler NPM package versions to drop a cross-platform credential stealer.
Identity & Access
As attackers increasingly favor stolen credentials over exploits, infostealers have become a primary source of access for ransomware and other cybercrime operations.
Malware & Threats
The infection chain includes a fake CAPTCHA page, a Bash script, a Nuitka loader, and the Python-based infostealer.
Malware & Threats
The medtech giant has been working on restoring systems affected by the cyberattack conducted by the Handala hackers.
Cybercrime
The 2024 incident was initially linked to China, but an infostealer infection has now revealed North Korean involvement.
Malware & Threats
Threat actors replace legitimate commands on the cloned installation webpages with malicious commands.
Malware & Threats
The malware targets browser and cryptocurrency wallet data, along with system information and user files.
Malware & Threats
Written in C++ and Python, the malware exfiltrates system information, browser data, and steals files.
Malware & Threats
The information stealer abuses legitimate APIs and libraries to exfiltrate data to Discord webhooks.
Data Breaches
The initial access broker (IAB) relies on credentials exfiltrated using information stealers to hack organizations.
Malware & Threats
The ‘download’ button on the official EmEditor website served a malicious installer.
Malware & Threats
A recent MacSync Stealer version no longer requires users to directly interact with the terminal for execution.
Tracking & Law Enforcement
An individual believed to have been involved in the operation of VenomRAT was arrested recently in Greece.
Data Breaches
The Japanese media giant says compromised Slack credentials were used to steal employee and business partner information.
Malware & Threats
Open VSX fully contained the GlassWorm attacks and says it was not a self-replicating worm in the traditional sense.
Malware & Threats
The packages deployed malicious code harvesting system information, credentials, tokens, API keys, and other sensitive information.
Data Breaches
The email addresses were pulled from various sources and 16.4 million of them were not present in previous data breaches.
Application Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Vulnerabilities
Artificial Intelligence
Malware & Threats
Artificial Intelligence
The ChatGPT maker said the researchers "violated clear policies on handling sensitive information.”
Vulnerabilities
