ArmorSteal steals credentials and mines Monero via fake downloads
Victims who paste a PowerShell command get a PyArmor-packed Python kit with three scheduled tasks and 11 command domains.
Stories per day · 30 days
Relatedwindows2armorsteal1boinc1cryptominer1infostealer1inno-setup1powershell1proxy1pups1resource-hijacking1xmrig1
5 stories, newest first · one card per story
Stories tagged #fake-downloads
Fake game downloads secretly monetize Windows PCs
Deceptive installers for games and utilities deliver software that shares bandwidth, runs distributed computing workloads, or installs utilities without informed user consent.
Hackers use fake software downloads to hijack Windows PCs
Fake installers bundle proxies, BOINC computing clients and utilities to monetize infected devices.
1
Counterfeit installers to system compromise: Tracking a deceptive software download campaign
Microsoft tracks a counterfeit software-installer campaign compromising multinationals' China operations, moderately linked to the Silver Fox (Yinhu) actor.
13
MacSync Stealer: How a Google Search for Claude Led to a macOS Infostealer
Huntress dissects MacSync Stealer, a macOS infostealer delivered through fake Claude Code download pages in Google search results.
2