ThreatVectr
Tag

#infostealer

36 stories taggedinfostealer.

Full-frame photoreal editorial shot of a darkened server room with a single glowing amber warning light reflected on rows of rack-mounted hardware, faint blue s
Vulnerabilities

Rust developers hit by supply-chain attack on arrayref crate

Attackers hijacked a maintainer account and slipped credential-stealing malware into three popular Rust libraries during a 1.5-hour window on August 20.

3 min read
A close-up photoreal shot of a laptop screen showing a blurred generic corporate login form, with a faint ghostly overlay of scrambled characters resolving into
Threat Intelligence

AmnesiaStealer: New Mac Malware Quietly Drains Passwords and Browser Sessions

A newly identified piece of malicious software targeting Apple Mac computers can lift saved passwords, browser cookies, and sensitive keychain data, and it is written in a programming language that makes it harder for security tools to catch.

3 min read
Full-frame 16:9 photoreal editorial shot of a developer workstation at night, multiple monitors showing dense terminal output and an open code editor with a sus
Threat Intelligence

Fake 'Solidity Pro' VS Code Extensions Caught Emptying Crypto Wallets

Two look-alike extensions posed as tools for Ethereum developers, then quietly installed wallet and password stealers on the machines that trusted them.

3 min read
Full-frame edge-to-edge photoreal news-editorial image of a dimly lit data center aisle with rows of server racks glowing blue and amber, faint orange light str
Cloud Security

Canadian hacker admits to Snowflake data thefts that hit 165 companies and 100 million people

Connor Moucka pleaded guilty to stealing terabytes from Snowflake customer accounts that had no second login step, extorting $2.5 million in bitcoin from victims including AT&T and Ticketmaster.

4 min read
Full-frame 16:9 photoreal editorial shot of a developer workstation at night, multiple monitors showing dense terminal output and an open code editor with a sus
Threat Intelligence

Fake Roblox Cheat Tool Hides Password Stealer and Remote Spy Software

Bitdefender says a months-long campaign is pushing booby-trapped copies of the Xeno script runner to Roblox players, planting malware that steals browser logins, drains crypto wallets and hands attackers full control of the PC.

4 min read
Full-frame edge-to-edge photoreal overhead shot of a darkened developer workstation, glowing monitor showing abstract green and amber code reflections, a faint
Threat Intelligence

Arch Linux freezes package adoptions after wave of malware sneaks into user repository

A stealer that harvests browser logins, crypto wallets and SSH keys has spread through more than 200 community-maintained Arch packages, forcing the project to hit pause.

4 min read
Full-frame edge-to-edge photoreal overhead shot of a laptop on a dark wooden desk with a generic software installer progress bar glowing on screen, faint reflec
Threat Intelligence

Fake Solana and TradingView Sites Build Malware Inside Your Browser

A malvertising operation active since late 2024 uses JavaScript to assemble info-stealing malware in browser memory, dodging network-based detection and hitting retail traders across 12 countries.

4 min read
Full-frame overhead view of a modern silver laptop on a dark wooden desk, screen showing a blurred generic system password dialog with a red warning glow, apps
Threat Intelligence

Dolphin X: The New Malware That Uses AI to Pick Which Victims to Rob First

A remote access trojan sold on a cybercrime forum claims to score infected computers by their value, helping criminals go after the richest targets first.

4 min read
Full-frame photoreal editorial shot of a dimly lit server rack in a small unmarked room, one door left ajar with light spilling into a corridor, cables slightly
Threat Intelligence

Careless malware crew leaves 1,048-file toolkit exposed on the open web

Rapid7 researchers grabbed the lot after the operators forgot to lock their delivery server. Inside: AI-written lures, dropper experiments and a live infostealer campaign hitting Windows users in Mexico.

3 min read
Full-frame 16:9 photoreal editorial shot of a laptop screen in a dim office, showing a generic fake verification prompt with a highlighted keyboard shortcut ins
Threat Intelligence

Russian Military Hackers Trick Ukrainians Into Infecting Their Own PCs

Ukraine's cyber emergency team says a Sandworm sub-group is using fake CAPTCHA prompts to plant data-stealing malware.

3 min read
Full-frame photoreal shot of a laptop screen showing a generic fake browser error dialog, warm office lighting, blurred keyboard in foreground, moody editorial
Threat Intelligence

ACR Stealer Tricks Staff Into Typing the Attack Themselves

Microsoft says a fake-fix trick is pushing a data thief onto business PCs, walking off with passwords, session cookies and cloud files.

4 min read
Photoreal editorial shot of a modern silver laptop on a dark wooden desk, screen showing a generic blurred password prompt box glowing against an otherwise blac
Threat Intelligence

ClickLock: the Mac malware that locks up your screen until you type your password

A new macOS stealer, tracked by Group-IB, freezes everything on the screen except a password box. It has already hit around 100 machines in 33 countries.

4 min read
Full-frame overhead view of a modern silver laptop on a dark wooden desk, screen showing a blurred generic system password dialog with a red warning glow, apps
Threat Intelligence

ClickLock: The Mac Stealer That Won't Let You Work Until You Hand Over Your Password

A new macOS malware kills your apps in a loop every 210 milliseconds, holding your machine hostage until you type in your login password.

4 min read
Full-frame photoreal editorial shot of a laptop screen showing a generic code-hosting website layout with a prominent green download button, glowing faintly, re
Threat Intelligence

Fake GitHub Pages Impersonate 292 Real Brands to Push Password-Stealing Malware

A Russian-speaking crew built hundreds of lookalike project pages for security tools, wallets and dev software. One click on 'Download Secure Content' handed over browser passwords, crypto wallets and chat sessions.

4 min read
Full-frame photoreal editorial shot of a developer's dark workstation at night, the glow of a large monitor showing abstract lines of code with a single line hi
Threat Intelligence

Malicious Jscrambler npm package stole developer secrets for two hours before takedown

A poisoned release of the Jscrambler npm package was downloaded almost 1,500 times, scooping up cloud keys, wallet seed phrases and browser credentials before the company pulled it.

3 min read
© 2026 Threat Vectr