Latest Information Stealer news

Discord still a hotbed of malware activity — Now APTs join the fun

Discord continues to be a breeding ground for malicious activity by hackers and now APT groups, with it commonly used to distribute malware, exfiltrate data, and targeted by threat actors to steal authentication tokens.
- Bill Toulas
- October 16, 2023
- 05:29 PM
- 4
Hundreds of malicious Python packages found stealing sensitive data

A malicious campaign that researchers observed growing more complex over the past half year, has been planting on open-source platforms hundreds of info-stealing packages that counted about 75,000 downloads.
- Bill Toulas
- October 04, 2023
- 05:31 PM
- 0
SSH keys stolen by stream of malicious PyPI and npm packages

A stream of malicious npm and PyPi packages have been found stealing a wide range of sensitive data from software developers on the platforms.
- Bill Toulas
- September 27, 2023
- 05:48 PM
- 1
Fake Bitwarden sites push new ZenRAT password-stealing malware

Fake Bitwarden sites are pushing installers purportedly for the open-source password manager that carry a new password-stealing malware that security researchers call ZenRAT.
- Ionut Ilascu
- September 27, 2023
- 05:07 PM
- 0
GitHub repos bombarded by info-stealing commits masked as Dependabot

Hackers are breaching GitHub accounts and inserting malicious code disguised as Dependabot contributions to steal authentication secrets and passwords from developers.
- Bill Toulas
- September 27, 2023
- 08:00 AM
- 0
Free Download Manager releases script to check for Linux malware

The developers of Free Download Manager (FDM) have published a script to check if a Linux device was infected through a recently reported supply chain attack.
- Bill Toulas
- September 20, 2023
- 03:02 PM
- 0
New 'MetaStealer' malware targets Intel-based macOS systems

A new information stealer malware named 'MetaStealer' has appeared in the wild, stealing a wide variety of sensitive information from Intel-based macOS computers.
- Bill Toulas
- September 12, 2023
- 05:06 PM
- 0
Facebook Messenger phishing wave targets 100K business accounts per week

Hackers use a massive network of fake and compromised Facebook accounts to send out millions of Messenger phishing messages to target Facebook business accounts with password-stealing malware.
- Bill Toulas
- September 11, 2023
- 11:01 AM
- 0
Hackers ask $120,000 for access to multi-billion auction house

Hackers have breached the network of a major auction house and offered access to whoever was willing to pay $120,000.
- Ionut Ilascu
- August 17, 2023
- 04:17 PM
- 1
Raccoon Stealer malware returns with new stealthier version

The developers of Raccoon Stealer information-stealing malware have ended their 6-month hiatus from hacker forums to promote a new 2.3.0 version of the malware to cyber criminals.
- Bill Toulas
- August 15, 2023
- 01:24 PM
- 0
LOLEKHosted admin arrested for aiding Netwalker ransomware gang

Police have taken down the Lolek bulletproof hosting provider, arresting five individuals and seizing servers for allegedly facilitating Netwalker ransomware attacks and other malicious activities.
- Lawrence Abrams
- August 11, 2023
- 11:59 AM
- 1
Sponsored Content
Safeguarding Against Silent Cyber Threats: Exploring the Stealer Log Lifecycle

Infostealer malware has risen to prominence as one of the most significant vectors of cybercrime over the past three years. Learn from Flare about information stealer logs and their role in the cybercrime ecosystem.
- Sponsored by Flare
- August 10, 2023
- 10:02 AM
- 0
New Realst macOS malware steals your cryptocurrency wallets

A new Mac malware named "Realst" is being used in a massive campaign targeting Apple computers, with some of its latest variants including support for macOS 14 Sonoma, which is still in development.
- Bill Toulas
- July 25, 2023
- 02:28 PM
- 0
Over 400,000 corporate credentials stolen by info-stealing malware

The analysis of nearly 20 million information-stealing malware logs sold on the dark web and Telegram channels revealed that they had achieved significant infiltration into business environments.
- Bill Toulas
- July 25, 2023
- 09:15 AM
- 0
Fake Linux vulnerability exploit drops data-stealing malware

Cybersecurity researchers and threat actors are targeted by a fake proof of concept (PoC) CVE-2023-35829 exploit that installs a Linux password-stealing malware.
- Bill Toulas
- July 13, 2023
- 02:28 PM
- 3
New ‘Big Head’ ransomware displays fake Windows update alert

Security researchers have dissected a recently emerged ransomware strain named 'Big Head' that may be spreading through malvertising that promotes fake Windows updates and Microsoft Word installers.
- Bill Toulas
- July 08, 2023
- 10:23 AM
- 1
Trojanized Super Mario game used to install Windows malware

A trojanized installer for a popular Super Mario Bros game has been infecting unsuspecting players with multiple Windows malware families.
- Bill Toulas
- June 25, 2023
- 10:36 AM
- 3
Over 100,000 ChatGPT accounts stolen via info-stealing malware

More than 101,000 ChatGPT user accounts have been compromised by information stealers over the past year, according to dark web marketplace data.
- Bill Toulas
- June 20, 2023
- 04:00 AM
- 0
New Mystic Stealer malware increasingly used in attacks

A new information-stealing malware named 'Mystic Stealer,' has been promoted on hacking forums and darknet markets since April 2023, quickly gaining traction in the cybercrime community.
- Bill Toulas
- June 18, 2023
- 11:14 AM
- 0
New Fractureiser malware used CurseForge Minecraft mods to infect Windows, Linux

Hackers used the popular Minecraft modding platforms Bukkit and CurseForge to distribute a new 'Fractureiser' information-stealing malware through uploaded modifications and by injecting malicious code into existing projects.
- Bill Toulas
- June 07, 2023
- 12:34 PM
- 0