Cyber CrimeMALFEX npm Campaign Hidden in Eight Packages
CloudSEK and Checkmarx say a lone actor shipped 12 npm packages since 2023, eight flagged malicious and downloaded 40,767 times.
> Search
30 results for “infostealer”
Cyber Crime
Cyber CrimeStolen Passwords Expose 1,787 Water Providers
SpyCloud research finds infostealer malware has harvested credentials tied to 1,787 U.S. water and wastewater organizations, some reaching operational networks.
Cyber Crimenpm stealer tied to bounty hunter
CrowdStrike says a claimed bug bounty hunter likely built the PhantomRaven npm stealer with an LLM, active since November 2022.
Cyber CrimeStolen AI Tokens Skirt Login Checks
Okta's review of a 7 GB infostealer dump found unexpired AI service tokens that can be replayed without a password or MFA.
SecurityREVSTEALER Modules Undermine Defender
Elastic uncovers four REVSTEALER-linked programs that disable Windows Update and Defender to mine crypto.
SecurityAnthropic tackles Claude session hijacking via infostealers
Anthropic warns that infostealer malware is stealing Claude login sessions to drain accounts.
Cyber CrimeAgent Tesla Variant Counters Detection With Emoji
New Agent Tesla v4 infostealer uses emoji obfuscation to evade detection and target finance departments.
SecurityRubyGems Poisoned: Supply Chain Risk Beyond Typos
OpenSourceMalware finds 16 typosquatted RubyGems, but the real risk is package name reuse and unvalidated author fields.
SecurityAmnesiaStealer Browser Hijack Raises Stakes for macOS
New macOS infostealer AmnesiaStealer combines credential theft with silent remote browser control, researchers report.
SecurityInfostealers Fuel 1.7B Credential Haul
Flashpoint logs 7.4M infostealer infections and 1.7B credentials stolen in H1 2026, up 27%.
SecurityAmnesiaStealer: New macOS Malware Shows Depth
Researchers have uncovered a new macOS infostealer that uses ClickFix social engineering and has stealthy remote browser control capabilities.
SecurityChrome's New Defense Against Cookie Theft
Device-bound session credentials could curb account takeovers, but rollout is limited for now.
SecurityClickFix Delivers Go-Based macOS Infostealer
Huntress discovers macOS stealer via ClickFix, targeting crypto wallets and credentials.
Cyber CrimeMac Crypto Drainer Uses ClickFix Tactics
A newly identified Go-based malware targets macOS users by leveraging social engineering to steal credentials and crypto assets.
Cyber CrimeChainDrop Worm Exploits npm Ecosystem
A self-propagating malware campaign has compromised over 1,300 npm packages, leveraging legitimate GitHub workflows to spread.
Cyber CrimeRoblox Cheat Tool Spreads Hidden Malware
A malicious version of the Xeno Executor mod is infecting computers with a RAT, granting attackers full control over user devices.
Russian APT29 Targets Hotel Wi-Fi Access
Microsoft identifies a state-sponsored campaign exploiting hotel captive portals to deploy infostealers and harvest credentials.
SecurityArch Linux Halts AUR Adoption Protocols
Security concerns over hijacked packages have forced a temporary freeze on adopting AUR contributions to protect the ecosystem.
SecurityMalware Campaign Targets Claude Users
A malicious Claude Artifact led users to download a remote access trojan, compromising at least 29 organizations in a recent campaign.
Cyber CrimeA Week of Diverse Cybersecurity Threats
From AI-powered infostealers and automotive vulnerabilities to massive kernel patch requirements, recent threats span multiple sectors.
Cyber CrimeACR Stealer Escalates Enterprise Threats
A sophisticated malware-as-a-service campaign is leveraging social engineering and WebDAV to compromise enterprise environments.
SecurityThe Paste-and-Run Malware Trap
ACR Stealer exploits user-executed commands to siphon session tokens and files, bypassing traditional software vulnerabilities.
Cyber CrimePhishing Masks Malware as TrueType Fonts
A persistent phishing operation is weaponizing fake TrueType font files to distribute infostealers and remote access trojans.
SecurityRussian Threat Group Leverages Trojan Apps
The UAT-11795 threat actor is deploying the Starland RAT via trojanized installers to harvest credentials and crypto assets.
Cyber CrimeOkoBot Injects Phishing Into Wallets
A sophisticated Windows malware framework is compromising cryptocurrency wallets by injecting fake recovery prompts into desktop apps.
Cyber CrimeGitHub Malware Campaign Hits 292 Repos
A malicious campaign using hundreds of fake repositories is actively deploying the BoryptGrab infostealer to compromised machines.
SecuritymacOS Infostealer Mimics System Alerts
A new C++ malware strain disguised as an Apple crash reporting tool is targeting local Keychain data and cryptocurrency wallets.
Cyber CrimeCrashStealer Malware Leverages Apple Developer IDs to Bypass Security
A sophisticated new macOS threat masquerades as system crash reporting tools to siphon credentials through a notarized infection chain.
SecuritySupply Chain Breach Targets Jscrambler Dependency Pipeline
A malicious npm package injection forced a swift cleanup, highlighting the persistent dangers of compromised build environments.
SecurityCrashStealer Malware Evades MacOS Defenses via Signed Notarization
A sophisticated new C++ information stealer leverages legitimate Apple developer IDs to bypass Gatekeeper and harvest user credentials.