Technology ❯ Cybersecurity ❯ Malware

Information Stealers

CrashStealer Rust-based Malware Vidar StealC LummaC2 MacSync AmnesiaStealer Lumma RevStealer ClickFix Attack

HBO Max Reddit Account Hijacked to Run Malicious ClickFix Ads

Researchers link the ads to PasteSwitch, an operation that delivers credential-stealing malware that often evades browser defenses.

Fake Claude App on GitHub Delivers RevStealer to Harvest Crypto Wallets

Microsoft Links 30+ Rotating Domains to MacSync Stealer by Tracking Behavior

AmnesiaStealer Gives Attackers Live Remote Control of macOS Browser Sessions

AmnesiaStealer: macOS Rust Stealer That Lets Attackers Run Hidden Live Browser Sessions

Russian-Linked Hackers Hijack Hotel Wi‑Fi to Steal Microsoft 365 Logins and Deliver Malware

CrashStealer: Notarized macOS Dropper Steals Passwords and Keychain

PamStealer Poses as Maccy to Validate and Steal macOS Passwords

Gaslight Malware Targets AI Tools to Foil macOS Analysis

Rust Stealer IronWorm and New Miasma Worm Infect Dozens of npm Packages

Attackers Use FortiClient EMS Bug to Push Infostealer to Managed Endpoints

Counterfeit Claude Code Installer Targets Developers With Browser Credential Theft

New macOS ‘Infiniti Stealer’ Uses ClickFix and Nuitka to Steal Data

Researchers Expose 'InstallFix' Malvertising Cloning Claude Code Install Pages to Deliver Infostealers

ClickFix Scam Exploits Signed App‑V Script to Deliver Amatera via Google Calendar and PNG Steganography

Researchers Exploit StealC Panel XSS to Expose Operations of ‘YouTubeTA’

Unit 42 Exposes VVS Stealer, Obfuscated Python Malware Targeting Discord Accounts

Notarized MacSync Stealer Variant Bypasses Gatekeeper as Apple Revokes Signing Certificate

Fake Windows Update Screens Drive Ongoing ClickFix Malware Wave

Russian-Linked StealC V2 Campaign Weaponizes Blender Files on 3D Marketplaces