#chocolatey

GBHackers6d agohigh

Fake Chocolatey and Microsoft activation sites distribute ArmorSteal

Zscaler says the September campaign's Python malware also logs keystrokes, swaps wallet addresses, and checks C2 every 60 seconds.