#infostealer
38 stories taggedinfostealer.
SectopRAT Hidden Inside Legitimate Audio Software to Steal Passwords and Take Remote Control
Fortinet's incident responders found a powerful remote-access trojan tucked inside a tampered copy of a real audio program. The malware can grab browser passwords, watch your screen, and hand full control of a Windows PC to criminals.
Malware Lets Four AI Models Vote on What to Steal Next
Cisco Talos found a Windows sample that hands its decisions to a small panel of AI models. The lab copy does not run, but the idea is the story.
The macOS ClickFix Scam Learned to Hide From Researchers
Microsoft says the fake-fix lure now checks your browser before showing itself, and a related campaign is pushing a new remote-control tool called ChainScript.
Criminals Are Hiding Malware Inside Trusted AI Tools Like Claude and ChatGPT
Attackers are abusing Claude Artifacts, shared ChatGPT links and sponsored search ads to slip malware past users who trust the branding.
Hijacked HBO Max Reddit account pushed 108 malware ads in 48 hours
A verified account was used to run a copy-paste scam that infected Windows and Mac users with password stealers and crypto-wallet thieves.
JSCeal: The Hidden JavaScript Malware Stealing Google Logins
Researchers at Check Point have pulled apart a stealthy piece of malware that hides inside compiled JavaScript, steals browser session cookies, and watches what victims do online.
BraZetsu: The Python Toolkit Turning Hacked PCs Into Products for Sale
Researchers say the framework lets access brokers package infected Windows machines as ready-to-sell inventory on criminal marketplaces.
When an Employee's Password Shows Up in a Stealer Log, the Session Cookie Is the Real Problem
Infostealer malware grabs more than passwords. It grabs live logins, and that's what lets attackers walk past multi-factor prompts.
Shai-Hulud Worm Now Hunts 469 Places for Developer Secrets
A self-spreading credential thief has more than doubled the hiding spots it checks on developer machines, from 189 to 469.
Anthropic warns Claude accounts are being hijacked by password-stealing malware
The AI company says common infostealer malware on customer PCs has been lifting active Claude login sessions, letting criminals sign in without a password and burn through usage limits.
WordlistLoader Hides Malware Inside Plain English Word Lists
A new delivery tool for a fast-growing password thief disguises harmful code as ordinary text, making it harder for security software to spot the infection before it takes hold.
Rust developers hit by supply-chain attack on arrayref crate
Attackers hijacked a maintainer account and slipped credential-stealing malware into three popular Rust libraries during a 1.5-hour window on August 20.
AmnesiaStealer: New Mac Malware Quietly Drains Passwords and Browser Sessions
A newly identified piece of malicious software targeting Apple Mac computers can lift saved passwords, browser cookies, and sensitive keychain data, and it's written in a programming language that makes it harder for security tools to catch.
Fake 'Solidity Pro' VS Code Extensions Caught Emptying Crypto Wallets
Two look-alike extensions posed as tools for Ethereum developers, then quietly installed wallet and credential stealers on the machines that trusted them.
Canadian hacker admits to Snowflake data thefts that hit 165 companies and 100 million people
Connor Moucka pleaded guilty to stealing terabytes from Snowflake customer accounts that had no second login step, extorting $2.5 million in bitcoin from victims including AT&T and Ticketmaster.