#information-stealer
#information-stealer
[ follow ]
#malware #macos #cybersecurity #malvertising #supply-chain-attack #phishing #obfuscated-shell-command
fromThe Hacker News
2 months agoCRESCENTHARVEST Campaign Targets Iran Protest Supporters With RAT Malware
The campaign exploits recent geopolitical developments to lure victims into opening malicious .LNK files disguised as protest-related images or videos, researchers Subhajeet Singha, Eliad Kimhy, and Darrel Virtusio said in a report published this week. These files are bundled with authentic media and a Farsi-language report providing updates from 'the rebellious cities of Iran.' This pro- protest framing appears to be intended to increase credibility and to attract Farsi-speaking Iranians seeking protest-related information.
Information security
fromThe Hacker News
3 months agoEvelyn Stealer Malware Abuses VS Code Extensions to Steal Developer Credentials and Crypto
The executable, for its part, decrypts and injects the main stealer payload into a legitimate Windows process ("grpconv.exe") directly in memory, allowing it to harvest sensitive data and exfiltrate it to a remote server ("server09.mentality[.]cloud") over FTP in the form of a ZIP file. Some of the information collected by the malware includes - Clipboard content Installed apps Cryptocurrency wallets Running processes Desktop screenshots
Information security
Information security
fromThe Hacker News
7 months agoRhadamanthys Stealer Evolves: Adds Device Fingerprinting, PNG Steganography Payloads
Rhadamanthys stealer operates as a professional MaaS with advanced fingerprinting and OCR, tiered paid packages, and related tools marketed under a rebranded cybercrime business.
Information security
fromThe Hacker News
8 months agoTamperedChef Malware Disguised as Fake PDF Editors Steals Credentials and Cookies
A malvertising campaign distributes a trojanized AppSuite PDF Editor that installs the TamperedChef information stealer and establishes persistence via Windows Registry.
fromThe Hacker News
8 months agoNoodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures
The Noodlophile campaign, active for over a year, now leverages advanced spear-phishing emails posing as copyright infringement notices, tailored with reconnaissance-derived details like specific Facebook Page IDs and company ownership information.
Information security
[ Load more ]