Atomic Stealer: macOS Information Stealer
Atomic Stealer is a known macOS information stealer that collects credentials and sensitive data. AmnesiaStealer shares similar objectives but differentiates itself with…
Tag: infostealer
Remus: A 64-bit Variant of Lumma Stealer
Remus is a 64-bit variant of the Lumma Stealer malware, distributed via fake websites offering cracked software and pirated games through SEO…
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
A new campaign has been discovered publishing nearly 800 malicious packages to the npm registry, designed to deliver a cross-platform remote access…
Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People
Connor Riley Moucka, a 26-year-old Canadian national, pleaded guilty in Seattle federal court to computer fraud, wire fraud, aggravated identity theft, and…
UNC5537: The Threat Actor Behind Snowflake Data Breaches
UNC5537 is a threat actor tracked by Mandiant, responsible for the 2024 Snowflake customer data breaches. The group exploited stolen credentials from…
Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures
Microsoft Threat Intelligence has uncovered a macOS ClickFix operation that uses more than 250 front-end domains to distribute malware, including MacSync and…
Atomic Stealer (AMOS): macOS Infostealer Targeting Credentials and Wallets
Atomic Stealer (AMOS) is an infostealer malware targeting macOS, designed to steal credentials, browser data, authentication stores, cryptocurrency wallets, and sensitive files.…
Two Compromised joyfill npm Packages Deliver RAT via Blockchain-Based C2
Two npm packages in the @joyfill namespace, @joyfill/layouts@0.1.2-2773.beta.0 and @joyfill/components@4.0.0-rc24-2773-beta.4, have been compromised to deliver a remote access trojan (RAT) associated with…
Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
A malware operator left its delivery server exposed, allowing Rapid7 to recover a full toolkit of 1,048 files including lure templates, filename-spoofing…
WebDAV Malware Campaign
A malware campaign using WebDAV shares to deliver infostealers and RATs, leveraging AI-assisted tooling and multiple CVEs.