Tag: browser credential theft

3 Attack Reports | 0 Vulnerabilities

Attack reports

5 Malicious NuGet Packages Impersonate Chinese UI Libraries to Distribute Crypto Wallet and Credential Stealer

Five malicious NuGet packages published under account bmrxntfj impersonate Chinese .NET libraries to deploy an infostealer targeting browser credentials, cryptocurrency wallets, SSH keys, and local files. The packages typosquat legitimate Chinese UI and infrastructure libraries, grafting .NET React…
lumma
supply chain attack
nuget
browser credential theft
2026-05-07
arrowrat
quantum
Published: May 7, 2026
Downloadable IOCs: 9

Malware Bypasses Browser Application-Bound Encryption Protections

A sophisticated 64-bit information-stealing malware named Remus has emerged as a direct evolution of the notorious Lumma Stealer. Following the doxxing of alleged Lumma core members between August and October 2025, developers created this advanced variant, with test builds appearing in September 20…
lumma stealer
information stealer
browser credential theft
etherhiding
application-bound encryption bypass
remus
tenzor
cryptocurrency wallet theft
2026-05-06
ethereum blockchain c2
Published: May 6, 2026
Downloadable IOCs: 4

PurpleBravo’s Targeting of the IT Software Supply Chain

PurpleBravo, a North Korean state-sponsored threat group, targets software developers through fake recruitment efforts, particularly in cryptocurrency and software development sectors. Their toolkit includes BeaverTail, PyLangGhost, and GolangGhost, designed for stealing browser credentials and cry…
social engineering
north korea
cryptocurrency
github
beavertail
remote access trojan
invisibleferret
software supply chain
astrill vpn
golangghost
pylangghost
2026-01-21
browser credential theft
it services
Published: January 21, 2026
Downloadable IOCs: 187
Click here to see more Attack Reports