Fake security tools on GitHub push backdoors and infostealers
Cybersecurity professionals are being targeted with infected security projects on GitHub that deploy a backdoor and information stealer malware. [.
Search
Find a quick tip
Results for "Stealer".
Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
Named “Volta-Autodoxer,” the recently uncovered malware uses AI tools to collect troves of data about victims, from login credentials and credit card numbers to Discord sessions and UberEats receipts.
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel.
Your Employee’s Password Appeared in an Infostealer Log. Now What?
Infostealers can expose far more than passwords, including authenticated sessions that may let attackers bypass MFA.
Anthropic warns infostealer malware is hijacking Claude sessions to drain usage
Anthropic is warning some Claude users that infostealer malware on their PCs has stolen active Claude login sessions, allowing attackers to access accounts and consume their usage.
Hackers poison arrayref Rust crate to push infostealer malware
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers' systems during compilation.
New AmnesiaStealer macOS malware hijacks browser sessions via remote control
A new information-stealing malware called AmnesiaStealer, which targets macOS users via ClickFix attacks, includes a streaming module that allows the attacker to interactively control the victim's web browser.
ClickFix attack pushes macOS infostealer for crypto theft attacks
A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain data, and cached credentials.
Fake Roblox Xeno script launcher pushes infostealer, RAT malware
Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensitive information.
Microsoft warns of surge in ACR Stealer attacks on customers
Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication tokens, and sensitive documents from its enterprise customers.
Hackers backdoor Jscrambler npm package with infostealer malware
The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm package that has been downloaded almost 1,500 times.
New CrashStealer malware poses as Apple crash reporting tool
A new macOS information-stealing malware called CrashStealer pretends to be Apple's crash-reporting tool to steal credentials, keychain data, and crypto wallets.
Injective SDK on npm Infected with Cryptocurrency Wallet Stealer
Hackers compromised the Injective Labs SDK project's GitHub repository and published a malicious package on the Node Package Manager (npm) that stole cryptocurrency wallet private keys and mnemonic seed phrases.
Critical SimpleHelp flaw exploited to deploy new stealer malware
Hackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and Linux.
New macOS ClickFix attack silently mounts DMGs to push infostealer
A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from malicious disk image (DMG) files.
Over 400 Arch Linux packages compromised to push rootkit, infostealer
More than 400 packages in the Arch User Repository (AUR) are distributing a Linux rootkit and infostealer malware targeting credentials and access tokens.
Vercel rolls out new protection against stolen session cookie attacks
Vercel is gradually rolling out Device Bound Session Credentials (DBSC) on its platform as a key defense against information stealer malware. [.
NIKKE PC game launcher hacked to spread remote access, data-stealing malware
The developers of Goddess of Victory: NIKKE have confirmed that hackers tampered with the game's PC launcher scripts in a supply-chain attack, distributing malware capable of stealing credentials and cryptocurrency wallet data. [.
Virtualine Bulletproof Hosting Service Seized for Cybercrime Facilitation
U.S. law enforcement has shut down Virtualine, a bulletproof hosting service linked to cybercrime, following a multi-national investigation.
Convertr Analytics Script Compromise: A Guide to Protecting Payment Card Data
Hackers compromised Convertr's analytics script, leading to the theft of payment card data. This guide provides insights into the attack and steps to protect your e-commerce platform.
How to Securely Use LiteLLM and Protect Against Supply Chain Attacks
LiteLLM, a popular open-source Python SDK, was compromised by hackers who pushed malicious Docker images containing malware. Here's how to secure your use of LiteLLM and protect against similar supply chain attacks.
Detecting and Responding to Machine Speed Attacks: A Comprehensive Guide
Machine speed attacks have become a significant concern, with attackers now enumerating data within 15 minutes of gaining access. This guide explores three common attack patterns and highlights the importance of effective detection and response.
OVHcloud CLI Security Incident: A Comprehensive Guide to Protecting Your Systems
OVHcloud's open-source CLI tool was compromised, leading to the distribution of malware that could steal developer secrets. This guide provides actionable steps to protect your systems and avoid similar incidents.
FakeGit malware campaign returns with 17,610 malicious GitHub repos
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer.
FBI Warns of FortiBleed Attacks and Other Cyber Threats
FBI and CISA issue warnings about ongoing FortiBleed attacks and other cyber threats, including ransomware, phishing, and AI-assisted attacks.
80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking
Infostealer logs exposed AI account credentials and sessions tied to more than 80,000 corporate domains, creating risks ranging from stolen conversations to LLMjacking.
GitHub Actions Compromised Again: Mini Shai-Hulud Supply-Chain Attack Continues
Two compromised GitHub Actions were re-enabled, pointing to malicious code for over a week, despite efforts to remove them.
The North Korean WaterPlum Hackers: A Global Cyber Threat
North Korean hackers infected over 30,000 devices worldwide, stealing over $10 million in cryptocurrency.
Coder's Registry Infrastructure Compromised to Push Malicious Modules
Coder's cloud development platform suffered an infrastructure compromise, leading to the delivery of malicious Terraform modules containing credential-stealing code.
OkoBot Malware Framework: A Comprehensive Guide to Understanding and Defending Against Cryptocurrency Theft
OkoBot, a sophisticated malware framework, has been deploying over 20 payloads to steal cryptocurrency wallet seed phrases, credentials, and other sensitive data. This guide provides an in-depth look at the framework's operations and defenses against it.