infostealer news
8 stories
Fake GTA 6 Extended Look and demo sites deliver an infostealer
Cybercriminals are exploiting the widespread anticipation for Grand Theft Auto VI by distributing password-stealing malware through fake websites impersonating Rockstar Games. These sites, which appear in search results for a "GTA 6 demo" or "Official Download," lure visitors into downloading a malicious executable disguised as a game installer.
Hackers poison arrayref Rust crate to push infostealer malware
A widely used Rust library, arrayref, was compromised through its maintainer account to distribute infostealer malware during compilation, affecting developers' systems. The attack, which occurred on August 20, also impacted two other crates, append-only-vec and internment, within a 23-minute window.
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
A recent report details the discovery of a campaign involving nearly 800 malicious npm packages designed to deliver a cross-platform Remote Access Trojan (RAT) and an infostealer. The packages leverage various deceptive tactics, including apparent AI generation and typo-squatting, to entice developers into incorporating them into their projects. The primary infection vector involves developers…
Armored Likho Hits Government, Energy Sectors With BusySnake Stealer
A newly identified threat actor, referred to as Armored Likho, is actively targeting organizations within the government and energy sectors across Russia, Kazakhstan, and Brazil. Researchers have observed a sophisticated phishing campaign orchestrated by this group, which leverages a custom-developed information-stealing malware.
New Malicious Campaign Delivers Vidar Infostealer and Monero Crypto Miner
A new cyber-attack campaign is targeting consumers and small to medium-sized businesses globally, aiming to steal cryptocurrency data and mine Monero. The campaign, first observed in April 2026 by Unit 42, the research division of Palo Alto Networks, employs a dual monetization strategy.
'BusySnake' Infostealer Slithers Into Critical Infrastructure Networks
A sophisticated information-stealing malware dubbed 'BusySnake' has been detected actively targeting critical infrastructure sectors. Threat actors operating under the moniker 'Armored Likho' have reportedly achieved successful infiltrations into government and electrical power organizations located in Russia, Brazil, and Kazakhstan.
Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign
A newly identified threat actor, dubbed Armored Likho, has been observed conducting targeted phishing campaigns against government agencies and the electric power sector in Russia, Brazil, and Kazakhstan. This group, also referred to as Eagle Werewolf based on circumstantial evidence, employs a sophisticated toolkit that includes a previously undocumented information stealer named BusySnake…
Lost in relocation: analysis of a new loader distributing CASTLESTEALER
A newly identified malware loader, dubbed OXLOADER, is being distributed through malicious Google advertisements, aiming to deliver the CASTLESTEALER information-stealing malware. Security researchers have observed OXLOADER employing a range of sophisticated obfuscation techniques to evade detection by static analysis tools and sandbox environments.