SecuriTricks - infostealers

Beware: Fake Google Meet Pages Deliver Infostealers in Ongoing ClickFix Campaign

Threat actors are using fake Google Meet web pages as part of the ClickFix campaign to deliver infostealers targeting Windows and macOS systems. The attackers display fake error messages in web browsers, tricking users into executing malicious PowerShell code. The campaign has expanded to impersona…

social engineering

powershell

Published: October 18, 2024

Downloadable IOCs: 0

Marko Polo Navigates Uncharted Waters with Infostealer Empire

An analysis has uncovered a highly adaptable cybercriminal group, codenamed 'Marko Polo', that operates sophisticated scams employing information-stealing malware to target individuals and organizations globally. They primarily operate through social media, impersonating legitimate brands in sector…

Published: September 17, 2024

Downloadable IOCs: 47

Strike Ready: Introducing the Bitter APT Group

The report provides an in-depth analysis of the Bitter APT Group, a threat actor primarily focusing on cyber espionage activities in South Asia. It details the group's tactics, techniques, and procedures, including their ability to bypass security technologies by leveraging obscure file formats and…

Published: August 19, 2024

Downloadable IOCs: 82

Stargazers Ghost Network

Check Point Research identified a sophisticated network of GitHub accounts distributing malware through malicious repositories. The Stargazers Ghost Network consists of different types of accounts performing various actions like starring, forking, and subscribing to give an appearance of legitimacy…

infostealers

2024-07-24

botnets

Published: July 24, 2024

Downloadable IOCs: 37

ViperSoftX Uses Deep Learning-based Tesseract to Exfiltrate Information

This analysis focuses on the recent activities of the ViperSoftX malware strain, which controls infected systems and steals user information. The malware is known to install additional malware payloads, including Quasar RAT and a new infostealer called TesseractStealer. TesseractStealer utilizes th…

Published: May 17, 2024

Downloadable IOCs: 8

Threat Actors Hack YouTube Channels to Distribute Infostealers

This analysis reveals that malicious groups have been exploiting popular YouTube channels, including some with over 800,000 subscribers, to distribute various infostealer malware strains like Vidar and LummaC2. The attackers upload videos promoting cracked software with links to malicious payloads …

Published: May 10, 2024

Downloadable IOCs: 13

Tag: infostealers

Attack reports

Analysis: SmokeLoader malware distribution

2024 Malicious Infrastructure Insights: Key Trends and Threats

Malicious CAPTCHA delivers Lumma and Amadey Trojans

Beware: Fake Google Meet Pages Deliver Infostealers in Ongoing ClickFix Campaign

Marko Polo Navigates Uncharted Waters with Infostealer Empire

Strike Ready: Introducing the Bitter APT Group

Stargazers Ghost Network

ViperSoftX Uses Deep Learning-based Tesseract to Exfiltrate Information

Threat Actors Hack YouTube Channels to Distribute Infostealers