Latest Information Stealer news

New Dark Pink APT group targets govt and military with custom malware

Attacks targeting government agencies and military bodies in multiple countries in the APAC region have been attributed to what appears to be a new advanced threat actor that leverages custom malware to steal confidential information.
- Bill Toulas
- January 11, 2023
- 02:00 AM
- 0
Over 1,300 fake AnyDesk sites push Vidar info-stealing malware

A massive campaign using over 1,300 domains to impersonate the official AnyDesk site is underway, all redirecting to a Dropbox folder recently pushing the Vidar information-stealing malware.
- Bill Toulas
- January 10, 2023
- 06:05 PM
- 2
Malicious PyPi packages create CloudFlare Tunnels to bypass firewalls

Six malicious packages on PyPI, the Python Package Index, were found installing information-stealing and RAT (remote access trojan) malware while using Cloudflare Tunnel to bypass firewall restrictions for remote access.
- Bill Toulas
- January 07, 2023
- 10:12 AM
- 0
New info-stealer malware infects software pirates via fake cracks sites

A new information-stealing malware named 'RisePro' is being distributed through fake cracks sites operated by the PrivateLoader pay-per-install (PPI) malware distribution service.
- Bill Toulas
- December 24, 2022
- 10:08 AM
- 2
Hackers bombard PyPi platform with information-stealing malware

The PyPi python package repository is being bombarded by a wave of information-stealing malware hiding inside malicious packages uploaded to the platform to steal software developers' data.
- Bill Toulas
- December 20, 2022
- 01:42 PM
- 0
Ukraine's DELTA military system users targeted by info-stealing malware

A compromised Ukrainian Ministry of Defense email account was found sending phishing emails and instant messages to users of the 'DELTA' situational awareness program to infect systems with information-stealing malware.
- Bill Toulas
- December 19, 2022
- 12:39 PM
- 1
Malicious ‘SentinelOne’ PyPI package steals data from developers

Threat actors have published a malicious Python package on PyPI, named 'SentinelOne,' that pretends to be the legitimate SDK client for the trusted American cybersecurity firm but, in reality, steals data from developers.
- Bill Toulas
- December 19, 2022
- 12:00 PM
- 0
Hackers target Japanese politicians with new MirrorStealer malware

A hacking group tracked as MirrorFace has been targeting Japanese politicians for weeks before the House of Councilors election in July 2022, using a previously undocumented credentials stealer named 'MirrorStealer.'
- Bill Toulas
- December 15, 2022
- 02:36 AM
- 0
New DuckLogs malware service claims having thousands of ‘customers’

A new malware-as-a-service (MaaS) operation named 'DuckLogs' has emerged, giving low-skilled attackers easy access to multiple modules to steal information, log key strokes, access clipboard data, and remote access to the compromised host.
- Bill Toulas
- December 01, 2022
- 11:19 AM
- 0
TikTok ‘Invisible Body’ challenge exploited to push malware

Hackers are capitalizing on a trending TikTok challenge named 'Invisible Challenge' to install malware on thousands of devices and steal their passwords, Discord accounts, and, potentially, cryptocurrency wallets.
- Bill Toulas
- November 28, 2022
- 01:40 PM
- 3
Russian cybergangs stole over 50 million passwords this year

At least 34 distinct Russian-speaking cybercrime groups using info-stealing malware like Raccoon and Redline have collectively stolen 50,350,000 account passwords from over 896,000 individual infections from January to July 2022.
- Bill Toulas
- November 23, 2022
- 06:02 AM
- 2
Aurora infostealer malware increasingly adopted by cybergangs

Cybercriminals are increasingly turning to a new Go-based information stealer named 'Aurora' to steal sensitive information from browsers and cryptocurrency apps, exfiltrate data directly from disks, and load additional payloads.
- Bill Toulas
- November 21, 2022
- 06:09 PM
- 1
Google Chrome extension used to steal cryptocurrency, passwords

An information-stealing Google Chrome browser extension named 'VenomSoftX' is being deployed by Windows malware to steal cryptocurrency and clipboard contents as users browse the web.
- Bill Toulas
- November 21, 2022
- 01:24 PM
- 0
New StrelaStealer malware steals your Outlook, Thunderbird accounts

A new information-stealing malware named 'StrelaStealer' is actively stealing email account credentials from Outlook and Thunderbird, two widely used email clients.
- Bill Toulas
- November 09, 2022
- 05:51 PM
- 1
Fake Solana Phantom security updates push crypto-stealing malware

Hackers are airdropping NFTs to Solana cryptocurrency owners pretending to be alerts for a new Phantom security update that lead to the installation of password-stealing malware and the theft of cryptocurrency wallets.
- Lawrence Abrams
- October 09, 2022
- 03:26 PM
- 0
New Erbium password-stealing malware spreads as game cracks, cheats

The new 'Erbium' information-stealing malware is being distributed as fake cracks and cheats for popular video games to steal victims' credentials and cryptocurrency wallets.
- Bill Toulas
- September 26, 2022
- 03:54 PM
- 0
2K Games says hacked help desk targeted players with malware

American video game publisher 2K has confirmed that its help desk platform was hacked and used to target customers with fake support tickets pushing malware via embedded links.
- Sergiu Gatlan
- September 20, 2022
- 06:12 PM
- 0
2K game support hacked to email RedLine info-stealing malware

Hackers have compromised the support system of American video game publisher 2K and now are sending support tickets to gamers containing the RedLine password-stealing malware.
- Lawrence Abrams
- September 20, 2022
- 12:13 PM
- 1
New malware bundle self-spreads through YouTube gaming videos

A new malware bundle uses victims' YouTube channels to upload malicious video tutorials advertising fake cheats and cracks for popular video games to spread the malicious package further.
- Bill Toulas
- September 15, 2022
- 01:35 PM
- 0
Dev backdoors own malware to steal data from other hackers

Cybercriminals using Prynt Stealer to collect data from victims are being swindled by the malware developer, who also receives a copy of the info over Telegram messaging service.
- Bill Toulas
- September 02, 2022
- 02:47 PM
- 2