Do Son Researchers uncover a fake Telegram site distributing stealthy, memory-resident malware that bypasses Windows Defender. Always verify your download URLs.
reflective loading
A Lumma Stealer campaign is using fake update lures on Itch.io. The malware uses a Node.js-compiled executable and a reflective loading technique to steal passwords and crypto wallets.
AsyncRAT reveals the evolving tactics of adversaries. It exploits aspnet_compiler.exe, intended for precompiling ASP.NET web applications