MacSync Stealer: A macOS Information Stealer
MacSync Stealer is a macOS-focused information stealer that collects credentials, cookies, SSH keys, AWS credentials, and other sensitive data. It uses ClickFix…
Tag: information stealer
Microsoft Ties 30+ Rotating Domains to MacSync Stealer Infrastructure
Microsoft Defender Experts have linked more than 30 web domains to MacSync Stealer, a macOS-focused information stealer, by correlating endpoint and network…
16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets
Cybersecurity researchers have uncovered a typosquatting campaign targeting RubyGems users with a Windows-based information stealer. The campaign, tracked as StubMaker by OpenSourceMalware,…
StubMaker: Typosquatted RubyGems Campaign
StubMaker is a typosquatting campaign targeting RubyGems users with a Windows-based information stealer. It uses malicious gems with extconf.rb hooks to deliver…
Atomic Stealer (AMOS): macOS Malware in ClickFix Campaigns
Atomic Stealer (AMOS) is a macOS information stealer distributed in ClickFix campaigns alongside MacSync Stealer. It targets credentials and sensitive data, often…
Xanadu’s mrmustard Library Poisoned
Xanadu's photonic quantum computing Python library, mrmustard, was compromised with a poisoned version that ran an information stealer. The attack involved breaching…
Poisoned mrmustard Library Delivers Information Stealer
A poisoned version of the mrmustard Python library from Xanadu was published to run an information stealer that harvests SSH keys, AWS…
18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users
Cybersecurity researchers have uncovered a sophisticated software supply chain attack targeting users of Alibaba developer tools with a cross-platform remote access trojan…
GHOSTBLADE: iOS Information-Stealing Malware
GHOSTBLADE is an information-stealing malware deployed on iOS devices via the DarkSword exploit kit. It delivers keychain, iCloud, and Wi-Fi credential-dumping modules…
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake…