News · via BlackFog
BlackFog Patches All Servers Following Critical PHP Vulnerabilities
BlackFog researchers uncover Bee Stealer, a Windows infostealer targeting Codex and Claude data with AI-powered victim profiling.
Infostealer
Coverage tagged "Infostealer".
News · via BleepingComputer
LiteLLM release pipeline hacked to distribute info-stealer malware
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
News · via BlackFog
DarkCore: A Data-Theft RAT With a Session-Hijacking Browser
BlackFog researchers uncover Bee Stealer, a Windows infostealer targeting Codex and Claude data with AI-powered victim profiling.
News · via Check Point Research
The Risk of AI-Powered Antidetect Browsers in Online Fraud and Influence Operations
Key Findings Antidetect browsers obscure the digital identity of their users, enabling a single operator to silently manage thousands of isolated accounts across multiple platforms (including…
News · via Malwarebytes Labs
AOMEI Backupper update servers hijacked to push malware: Check your PC
The Google Threat Intelligence Group (GTIG) reports that attackers compromised AOMEI Technology’s update and notification infrastructure in a campaign investigated between April and July. AOMEI…
News · via Hudson Rock
Infostealers Weekly Report: 2026-10-12 – 2026-10-19
InfoStealers Weekly Report – In this comprehensive report, we provide you with valuable insights into the most pressing threats facing organizations today. As cyberattacks continue to grow in…
News · via Security Affairs
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 119
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter IronChain Ransomware Threatens Businesses with…
News · via Infosecurity Magazine
New Aoki Infostealer Targets AI Coding Assistant Credentials
Symantec warned that Aoki can steal API keys and tokens from a number of popular AI coding assistants, including Claude and Gemini
News · via Hudson Rock
The 2026 Infostealer Index: How 34 Threat Intelligence Vendors Stack Up
The 2026 Infostealer Index An independent, deep-dive analysis of Hudson Rock’s benchmark threat intelligence evaluations. Ranking 34 vendors across 9 critical vectors. As infostealer malware…
News · via Hudson Rock
Hudson Rock Partners with TRM Labs as a Launch Data Partner for Ardence, the New AI Investigation Platform
Partnership Announcement October 14, 2026 · Cybercrime Intelligence Hudson Rock Partners with TRM Labs as a Launch Data Partner for Ardence, the New AI Investigation Platform Bridging the gap between…
News · via Security Affairs
How a leaked builder of XWorm turned a remote access trojan into a surveillance kit
Netskope tracks four XWorm versions in the wild, 46 plugins, and new tools for location, audio and live browser control, with detections up fourfold. Netskope Threat Labs has been following XWorm…
News · via SOCRadar
n0n Group Puts Dozens of Global Ports and Shipping on Its Leak Site
n0n Group Puts Dozens of Global Ports and Shipping on Its Leak Site A month after its first leak site postings, the n0n extortion group has turned its attention to global shipping.
News · via Hudson Rock
First Physical Robbery Potentially Linked to Revolut Data Breach
First Physical Robbery Potentially Linked to Revolut Data Breach Following the recent Revolut hack we reported on, we are now seeing the terrifying real-world consequences of compromised customer…
News · via SOCRadar
Inside ICMacOS: From an Infostealer to a Persistent RAT
Inside ICMacOS: From an Infostealer to a Persistent RAT Over the past few years, Apple’s enterprise footprint has expanded significantly, with macOS capturing an important share of the global desktop…
News · via Elastic Security Labs
Auditing the auditor: Unmasking Apex Accelerator
Elastic Security Labs identified a malicious npm package, @apexacc/cli, which led us to an operation posing as a Web3 accelerator. That operation had spent months building a public presence…
News · via BleepingComputer
FakeGit malware campaign returns with 17,610 malicious GitHub repos
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer.
News · via Flashpoint
CastleStealer: An Emerging Infostealer Growing More Sophisticated
Table Of ContentsTable of ContentsWhat We Know About CastleStealerWhat Data Does CastleStealer Target?Bypassing App-Bound EncryptionFrom Infostealer to Remote AccessHow CastleStealer Exfiltrates…
News · via The Hacker News
UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN. According to TrendAI, the malware…
News · via Hudson Rock
Infostealers Are Actively Hunting AI Agents and Developer Keys – Warden Infostealer
Infostealers Are Actively Hunting AI Agents and Developer Keys – Warden Infostealer Initial announcement and feature breakdown of Warden Stealer on the Exploit.in dark web forum. A highly…
News · via Security Affairs
FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away
FBI and Secret Service warn FortiBleed, a credential-harvesting campaign against Fortinet firewalls, has compromised 86,644 devices and is locking out admins. The FBI and the U.S. Secret Service…