Remus Stealer advertises $1,000 Gmail access that survives resets
Hudson Rock has not verified persistence after password changes or a Gmail vulnerability.
Stories per day · 30 days
2 RSS
Relatedinfostealer2android1banking-trojan1call-forwarding1credential-access1fortnite1gmail1india1marsalek1mcafee1otp1remus-stealer1roblox1
9 stories, newest first · one card per story
Stories tagged #maas
Marsalek Infostealer spreads fake game cheats to steal browser data
MaaS platform Marsalek distributed cheats for Roblox and Fortnite, stealing passwords cookies Discord tokens and crypto wallets from over 1,560 accounts using CMSTP UAC bypass.
2
MR ROBOT Android MaaS rents bank trojans aimed at Indian customers
CloudSEK says one affiliate’s data held 5,407 texts from 153 devices, with call forwarding on 58 percent.
1
New Python Infostealer Targets 17 Browsers to Steal Passwords, Cards and Session Cookies
K7 Labs details a Python infostealer MaaS builder harvesting credentials, cards and session cookies from 17 Chromium browsers plus Firefox.
2
MacSync under the microscope: new delivery methods and a new payload
MacSync, a crypto/info stealer with a backdoor module, was spotted in the wild in September 2026 with new binary payload delivery methods.
Exvicy ClickFix Malware-as-a-Service Copies ErrTraffic to Hijack WordPress Sites
New Exvicy MaaS uses compromised WordPress sites to deliver ClickFix lures mimicking Cloudflare Turnstile, assessed as a copycat of ErrTraffic.
Fake TV Streaming Ads Deliver StreamRat Malware for Remote Android Device Hijacking
StreamRat, a new Android banking trojan, spreads through fake TV-streaming ads on Meta and TikTok.
VectraRAT Can Hack Windows Enterprises for $250 per Month
VectraRAT malware-as-a-service sells a Windows implant with C2 infrastructure and operator panel for $250 per month.
MaaS Campaign Combines ClickFix, ErrTraffic and Cruciferra
eSentire uncovered a malware-as-a-service campaign pairing ClickFix social-engineering lures with the ErrTraffic and Cruciferra malware families.
2