Tag: infostealer
Hijacked HBO Max account floods Reddit with ClickFix ads
A verified HBO Max Reddit account pushed 108 malicious ads in 48 hours, part of a broader operation spreading infostealers.
Stolen AI session tokens let thieves skip the login step
Okta found thousands of live AI session tokens in a stealer log, letting thieves replay their way into paid tools.
REVSTEALER’s leftover modules outlast the stealer to mine crypto
Elastic finds four REVSTEALER companion modules that persist after the stealer deletes itself, including one that mines crypto.
Bogus Claude Opus 5 download on GitHub drops infostealer
A GitHub repo promising free Claude Opus 5 is quietly installing the RevStealer infostealer, according to Morphisec.
Stolen browser sessions let thieves drain paid Claude accounts
Anthropic locks victims out and refunds charges after infostealers hijack active login sessions.
WeedHack infostealer still ranks top in Minecraft mod searches
Fake Minecraft client sites keep ranking at the top of search results while dropping the WeedHack infostealer.
Firefox store hosts 40 wallet-stealing add-ons in crypto heist ring
Socket found 40 malicious Firefox extensions posing as Web3 products to drain recovery phrases and private keys.
Azure directory dumps put McDonald’s and TCS staff data up for sale
A seller posting employee directories claims they came from Azure tenants of nine companies, and Hudson Rock says the samples…