Articles | InfoStealers

• A Multi-Actor Infrastructure Investigation (Mapping the Malware Maze) December 21, 2024
  Another finding by Fox, related to LummaC2 infostealer sparked an infra hunt that led to many findings. C2 Host Pivot & Windows Server Pattern Following the finding of X user Fox_threatintel, we can see that there are 17 hosts matching the query for specific nginx versions running on port 19000. What stands out immediately are the findings […]
• Profiling CSAM Consumers Using Infostealers Data December 21, 2024
  If there is one type of content strictly banned and monitored across every platform on the internet, it is the CSAM (Child Sexual Abuse Material). For this reason, those who seek to consume such content must turn to very specific channels to access it. Across mainstream platforms like social media, websites on the clear web, […]
• Server-Side Infostealers: How Initial Access Broker Pryx is Revolutionizing Infostealers December 17, 2024
  In a recent interview given to Osint10x , “Pryx”, the admin of the Hellcat Ransomware Group, shared insights into their methods, their vision for the future of infostealers, and how server-side innovations are reshaping the game. Breaking Down the Traditional Infostealer Model Traditionally, infostealers rely on client-side operations, with malicious payloads deployed directly on victim machines. […]
• “DeceptionAds” — Fake Captcha Driving Infostealer Infections and a Glimpse to the Dark Side of Internet Advertising December 16, 2024
  Guardio Labs tracked and analyzed a large-scale fake captcha campaign distributing a disastrous Lumma info-stealer malware that circumvents general security measures like Safe Browsing. Entirely reliant on a single ad network for propagation, this campaign showcases the core mechanisms of malvertising — delivering over 1 million daily “ad impressions” and causing thousands of daily victims to lose their […]
• Tracking the FBI’s Most Wanted: “RedLine” Info-Stealer Creator Maxim Rudometov December 14, 2024
  A coalition of international law enforcement agencies has been investigating the creator and distributor of the notorious infostealer variant RedLine in an operation codenamed “Operation Magnus.” RedLine, a MaaS (Malware-as-a-Service), has stolen sensitive data from millions of users worldwide, including credit card information, browser history, autofill form data, emails, and passwords. Active since 2020, RedLine […]
• Malicious PyPI crypto pay package aiocpa implants infostealer code December 13, 2024
  Executive Summary ReversingLabs’ machine learning-based threat hunting system detected malicious code in a legitimate looking package, aiocpa, last week that was engineered to compromise crypto currency wallets. RL then reported the malicious package to the Python Package Index (PyPI) to be taken down, and the PyPI team then published their own blog about the package. Shortly after, researchers at […]
• Meeten Malware: A Cross-Platform Threat to Crypto Wallets on macOS and Windows December 13, 2024
  Cado Security Labs have identified a new sophisticated scam targeting people who work in Web3. The campaign includes crypto stealer Realst that has both macOS and Windows variants, and has been active for around four months. The threat actors behind the malware have set up fake companies using AI to make them increase legitimacy. The […]
• Hudson Rock Launches CavalierGPT: The First Comprehensive Infostealer Intelligence AI Bot (Free) December 10, 2024
  December 10, 2024 – Hudson Rock, a leader in cybercrime intelligence, is proud to announce the official launch of CavalierGPT, the industry’s first AI-powered bot dedicated to providing comprehensive intelligence on infostealer malware. CavalierGPT leverages Hudson Rock’s vast database of stolen data and insights into infostealer operations to deliver instant, actionable intelligence for cybersecurity teams […]
• Hudson Rock Announces First Comprehensive Infostealers AI Bot: CavalierGPT November 27, 2024
  Hudson Rock is thrilled to announce the launch of CavalierGPT, the first-ever Infostealer Intelligence AI Bot designed to empower researchers with free access to data associated with Infostealer infections. CavalierGPT retrieves and curates information from various Hudson Rock endpoints, enabling investigators to delve deeper into cybersecurity threats with unprecedented ease and efficiency. We are excited […]