Do Son Discover how NodeLoader malware uses Node.js applications for Windows to deliver second-stage payloads, including XMRig, Lumma, and Phemedrone Stealer.
Phemedrone Stealer
Phemedrone Stealer's infection chain begins with the hosting of malicious Internet Shortcut files on platforms like Discord or cloud services