StealC’s Creator Resurfaces With ‘Stadia’ — a Password Stealer With Hidden Remote Control Built In
Months after law enforcement dismantled StealC's infrastructure in Operation Endgame, the same seller is back with Stadia, a Windows remote access trojan that pairs credential theft with hidden...
Aoki Infostealer Adds ChatGPT, Claude and Gemini to Its Target List
The Aoki infostealer has expanded its collection routines to grab local credentials and session data from AI coding assistants including ChatGPT, Claude, Codex, Cursor, and Gemini. Researchers warn...
CastleStealer Malware Adds Remote Shell Access After Cracking Chrome’s Cookie Protection
CastleStealer, a C#-based information stealer first spotted in April, has gained the ability to bypass Chrome's App-Bound Encryption and hand its operators a remote shell on infected Windows...
Warden Stealer-as-a-Service Expands to Target Browser Vaults, Crypto Wallets, and AI Agent Tokens
A fast-growing Rust-based information stealer called Warden Stealer is spreading through ClickFix lures, malicious ads, cracked software, and fake game cheats. Sold as a malware-as-a-service kit, it bypasses...
Fake Cloudflare Verification Pages Used to Push LUNEXSTEALER Malware on 100+ Hacked Sites
Ukraine's CERT-UA is tracking a campaign, dubbed UAC-0277, that has compromised more than 100 legitimate websites to show visitors a convincing but fake Cloudflare verification screen. Clicking through...
TWEAKOS Doesn’t Just Steal Your Discord and Telegram Accounts — It Puts Them Up for Sale
A newly uncovered malware operation called TWEAKOS pairs a lightweight Windows stealer with a Telegram-based storefront, letting operators harvest Discord tokens and hijack Telegram sessions, then sell the...
NodeStealer Adds Keylogging and Screenshots to Its Account-Theft Arsenal
A new NodeStealer variant adds continuous keylogging, clipboard monitoring and screenshots to its browser and Facebook data theft. Financial services were the most affected sector in recent activity...
Infostealers Target Claude Sessions, Letting Attackers Bypass MFA and Drain Paid Accounts
Attackers are stealing authenticated Claude browser sessions and abusing malicious ads and files to compromise users. Anthropic has invalidated affected sessions and refunded confirmed charges, but victims must...