Fake Chocolatey and Microsoft activation sites distribute ArmorSteal
Zscaler says the September campaign's Python malware also logs keystrokes, swaps wallet addresses, and checks C2 every 60 seconds.
3
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #armorsteal
SEO poisoning campaign delivers new Armorsteal malware
Fake Chocolatey and Massgrave sites installed a Python remote-access module that steals system data and runs signed tasks.
1