Tag: cryptocurrency theft

5 Attack Reports | 0 Vulnerabilities

Attack reports

Unmasking GrassCall Campaign: The APT Behind Job Recruitment Cyber Scams

The GrassCall malware campaign is an advanced social engineering attack conducted by a Russian-speaking cybercriminal group called Crazy Evil. Targeting job seekers in the cryptocurrency and Web3 sectors, the campaign uses fake job interviews to compromise victims' systems and steal cryptocurrency …

social engineering

cryptocurrency theft

job recruitment

atomic macos stealer (amos)

Published: March 6, 2025

Downloadable IOCs: 14

HEXON STEALER: THE LONG JOURNEY OF COPYING, HIDING, AND REBRANDING

Hexon Stealer, a malware capable of extracting sensitive information from browsers, has emerged as a rebranded version of Stealit Stealer. It utilizes the Electron framework and NSIS installer format to target browser cookies, credentials, and crypto-wallets. The malware grants full remote access t…

cryptocurrency theft

browser data theft

electron framework

stealit stealer

turkish developer

discord stealer

Published: November 23, 2024

Downloadable IOCs: 0

Differential analysis raises red flags over @lottiefiles/lottie-player

ReversingLabs researchers discovered malicious versions of the popular npm package @lottiefiles/lottie-player. Versions 2.0.5, 2.0.6, and 2.0.7 were compromised and used to spread malicious code designed to steal crypto wallet assets. The attackers altered the lottie-player.js file, replacing its c…

cryptocurrency theft

supply chain attack

package compromise

open-source security

differential analysis

Published: November 22, 2024

Downloadable IOCs: 0

DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware

DPRK-associated threat actors are targeting tech industry job seekers through fake recruitment campaigns, installing malware on their devices. The campaign, named CL-STA-240 Contagious Interview, uses social engineering to lure victims into online interviews where they are convinced to download mal…

social engineering

cryptocurrency theft

python backdoor

Published: October 9, 2024

Downloadable IOCs: 0

Ailurophile: G DATA has sighted a new info stealer in the wild

G DATA has detected a novel information-stealing malware, dubbed 'Ailurophile Stealer'. It is a PHP-based stealer offered through a subscription model on its dedicated website. Customers utilize a web panel to generate customized malware variants, specifying features such as the malware name, icon,…

credential theft

cryptocurrency theft

ailurophile stealer

Published: August 19, 2024

Downloadable IOCs: 2

Click here to see more Attack Reports