ThreatVectr
Tag

#infostealer

36 stories taggedinfostealer · page 2 of 3.

Full-frame 16:9 editorial photo of a modern silver laptop open on a dark wooden desk, screen glowing with an abstract soft-blue security shield graphic that app
Threat Intelligence

CrashStealer: the new Mac malware that slips past Apple's own safety checks

Researchers at Jamf Threat Labs say the C++-based stealer used an Apple-notarised installer to bypass Gatekeeper and grab passwords, browser data and crypto wallets from macOS users.

4 min read
Full frame photoreal editorial shot of a darkened developer workstation with a terminal window glowing on the monitor, an installation progress bar half complet
Threat Intelligence

Booby-trapped jscrambler npm release runs infostealer the moment you install it

Version 8.14.0 of a popular JavaScript protection package shipped with a hidden payload that fires during install, no code changes required from the developer.

3 min read
Photoreal news-editorial style, 16:9 framing, full-frame edge-to-edge composition
Threat Intelligence

Fake Pirated Software Ads Are Draining Passwords and Hijacking Computers to Mine Crypto

A campaign uncovered by Palo Alto Networks researchers is tricking people into downloading malware disguised as cracked software, stealing saved passwords while quietly running up victims' electricity bills.

3 min read
Photoreal news-editorial style, 16:9 framing, full-frame edge-to-edge
Threat Intelligence

Meet BusySnake: The Stealthy Malware Quietly Raiding Government Networks

A newly discovered hacking group is hitting government offices and critical services in three countries with a cunning piece of spy software. Here is what it does and who is at risk.

3 min read
A high-voltage electricity substation at dusk, transformers and steel pylons silhouetted against a deep blue sky, faint control-room glow visible through a dist
Threat Intelligence

Armored Likho: the newly-named hacking crew hitting power grids and government offices

Russian security firm Kaspersky says the group mixes espionage against big institutions with money-driven attacks on ordinary people.

3 min read
Full-frame 16:9 photoreal editorial shot of a modern silver laptop on a dark wooden desk, screen glowing with an abstract blurred password dialog box, soft cool
Threat Intelligence

PamStealer: Fake Maccy App Hides Mac Password-Grabbing Script

Researchers say the AppleScript malware poses as a popular clipboard tool, tricks users into typing their Mac password, then quietly ships browser data and crypto wallets to its operators.

4 min read
Full-frame photoreal editorial image of a laptop screen showing a generic web browser with a red warning icon in the address bar and a blurred popup dialog, dim
Threat Intelligence

Opera's new Paste Protect tries to stop the copy-paste scam that's been draining wallets

The browser will now block dodgy commands before they reach your clipboard, targeting the ClickFix trick that has become criminals' favourite way to trick people into infecting their own computers.

3 min read
Threat Intelligence

ChocoPoC: The Fake Exploit Repos Turning Bug Hunters Into Victims

A Python-based infostealer is hiding inside GitHub proof-of-concept code marketed to vulnerability researchers, siphoning credentials, cookies, and files before dropping a remote shell.

2 min read
Threat Intelligence

VEIL#DROP: Blogger-Hosted Chain Drops PureLogs Stealer

Researchers flag a multi-stage delivery scheme abusing Google's Blogger platform to stage PureLogs, an infostealer sold in underground forums.

2 min read
Threat Intelligence

Supply-Chain Attackers Hide Python Stealer in npm and Go Packages, Sidestep Lifecycle Scripts

JFrog flags two hijacked npm packages and a Go cluster that abuse VS Code tasks to drop a cross-platform infostealer — bypassing the script hooks defenders typically watch.

3 min read
AI Security

Gaslight: A Rust macOS Stealer That Tries to Talk Your AI Analyst Out of Looking

The implant ships with an embedded prompt injection payload aimed at LLM-assisted reverse engineering tools — a small but telling escalation in adversarial UX.

3 min read
Threat Intelligence

Operation Endgame Hits Amadey and StealC, Pulls 27M Credentials From Loader Infrastructure

Europol-led takedown dismantled command servers behind two of the most prolific malware-as-a-service loaders, with Microsoft, ESET, Bitdefender, and Bitsight providing technical support.

3 min read
Threat Intelligence

Law Enforcement and Microsoft Tear Down Command Infrastructure Behind Amadey and StealC

Hundreds of C2 servers went dark in a coordinated takedown targeting the shared hosting backbone used by two prolific infostealer families.

2 min read
Threat Intelligence

OXLOADER Drops CastleStealer via Poisoned Google Ads, Researchers Say

Elastic Security Labs links the malvertising chain to a likely Russian-speaking, financially motivated operator.

2 min read
Threat Intelligence

AUR Supply-Chain Hit: 400+ Arch Packages Backdoored With Rust Stealer, Optional eBPF Rootkit

Build scripts in hijacked Arch User Repository packages dropped a credential harvester — and an eBPF rootkit when root was available.

2 min read
© 2026 Threat Vectr