DarkCloud Stealer: Information Stealer Malware Distributed via Cruciferra
DarkCloud Stealer is an information stealer malware that has been distributed using the Cruciferra crypter. It targets sensitive data from infected systems.
Tag: information stealer
Formbook: Commodity Information Stealer Delivered via Cruciferra
Formbook is a commodity information stealer malware that has been delivered through Cruciferra campaigns. It is known for form grabbing and keylogging.
Phantom Stealer: Information Stealer Malware Distributed via Cruciferra
Phantom Stealer is an information stealer malware that has been distributed using the Cruciferra crypter. It targets credentials and other sensitive data.
XLoader: Information Stealer and Loader Malware Distributed via Cruciferra
XLoader is an information stealer and loader malware that has been distributed using the Cruciferra crypter. It is known for stealing credentials…
Golden Chickens Resurfaces With Four New Malware Families and Modular Implants
The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families, indicating that the operators are…
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Cybersecurity researchers have uncovered a large-scale campaign that weaponizes compromised GitHub repositories to target cPanel and WebHost Manager (WHM) instances. The activity…
Information Stealer Targets Cloud and HPC Credentials
A poisoned version of the mrmustard Python library from Xanadu was used to run an information stealer that harvests SSH private keys,…
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
Cybersecurity researchers have uncovered a large-scale campaign dubbed FakeGit, which leverages nearly 7,600 malicious GitHub repositories to distribute the SmartLoader malware. The…
CrashStealer macOS Malware Uses Notarized Dropper to Bypass Gatekeeper and Steal Sensitive Data
Cybersecurity researchers at Jamf Threat Labs have uncovered a new macOS information stealer named CrashStealer, which uses a signed and Apple-notarized dropper…
EKZ Stealer Information Stealer
An information stealer deployed via exploitation of CVE-2026-35616 in Fortinet FortiClient EMS, targeting credentials from Chromium-based browsers and Firefox.