Vidar

New 2CLoader Malware Delivers Vidar and Remus Infostealers While Dodging Sandboxes

• Malware

New 2CLoader Malware Delivers Vidar and Remus Infostealers While Dodging Sandboxes

Do Son October 5, 2026 0

2CLoader malware dodges sandboxes and security tools to deliver Vidar and Remus infostealers. See how it works and how to detect it.

TELEPUZ Malware Spreads Through ClickFix and VIDAR Attacks

• Malware

TELEPUZ Malware Spreads Through ClickFix and VIDAR Attacks

Do Son July 21, 2026 0

Elastic Security Labs found TELEPUZ malware spreading via a ClickFix attack chain. The modular MaaS uses WebSockets and blockchain C2 fallback.

Vidar ABE Bypass Technique Steals Browser Keys

• Malware

Vidar ABE Bypass Technique Steals Browser Keys

Do Son June 25, 2026 0

Gen Digital uncovered a new Vidar ABE bypass technique. The Vidar infostealer malware now uses memory scanning and APC injections to extract browser keys.

ErrTraffic Malware Spreads ClickFix Lures via Hacked WordPress Sites

• Malware

ErrTraffic Malware Spreads ClickFix Lures via Hacked WordPress Sites

Do Son June 22, 2026 0

ErrTraffic malware powers ClickFix attacks on hacked WordPress sites, using EtherHiding on the blockchain to hide its C2 and spread infostealers.

GoFlateLoader: The Bloated Golang Malware Smuggling Infostealers Past Scanners

• Malware

GoFlateLoader: The Bloated Golang Malware Smuggling Infostealers Past Scanners

Do Son June 17, 2026 0

GoFlateLoader malware, a Golang loader, uses a giant PE overlay to evade scanners and deliver infostealers like Lumma, Vidar, and StealC.

Tactical Misdirection: The “Hologram” Malware Framework Hijacking AI Enthusiasts

• Malware

Tactical Misdirection: The “Hologram” Malware Framework Hijacking AI Enthusiasts

Do Son May 11, 2026 0

Netskope exposes Hologram: a red-team-grade malware framework targeting OpenClaw AI users with CLR injection and WinLogon hijacking to steal crypto wallets.

Inside the Stealthy Evolution of Vidar Infostealer

• Malware

Inside the Stealthy Evolution of Vidar Infostealer

Do Son April 28, 2026 0

Vidar infostealer evolves into a fileless 2026 threat. From fake CAPTCHAs to "Claude Code" leaks, see how it steals crypto and passwords via Telegram C2.

Vidar Infostealer Hits npm for the First Time via 17 Typosquatted Packages and Postinstall Scripts

• Malware

Vidar Infostealer Hits npm for the First Time via 17 Typosquatted Packages and Postinstall Scripts

Do Son November 10, 2025 0

Datadog exposed MUT-4831, a cluster that deployed Vidar Infostealer via 17 malicious npm packages. The malware uses postinstall scripts to download and execute the payload, stealing credentials and crypto wallets.

Acreed: The New Infostealer Using BNB Smart Chain and Steam Profiles for Stealthy C2

• Malware

Acreed: The New Infostealer Using BNB Smart Chain and Steam Profiles for Stealthy C2

Do Son September 30, 2025 0

The new infostealer Acreed is rapidly gaining market share post-Lumma takedown. It uses BNB Smart Chain and Steam profiles for C2, with a focus on crypto theft.

AI-Generated Malware: TikTok Videos Push Infostealers with PowerShell Commands

• Malware

AI-Generated Malware: TikTok Videos Push Infostealers with PowerShell Commands

Do Son May 24, 2025 0

AI-generated TikTok videos are instructing users to run PowerShell commands, leading to the delivery of Vidar and StealC infostealer malware.

Lumma Stealer Uses GitHub as a Malware Delivery Platform

• Malware

Lumma Stealer Uses GitHub as a Malware Delivery Platform

Do Son February 3, 2025 0

Uncover a sophisticated malware campaign using GitHub's release infrastructure to distribute the dangerous Lumma Stealer Trojan. Learn more.

Cracked Software: A Gateway to Malware and Data Theft

• Malware

Cracked Software: A Gateway to Malware and Data Theft

Do Son January 10, 2025 0

Beware of cracked software and fake installers. Discover how cybercriminals exploit user trust and spread malicious payloads.

RisePro and PrivateLoader Threat Actors Strike Again with RiseLoader

• Cyber Security
• Malware

RisePro and PrivateLoader Threat Actors Strike Again with RiseLoader

Do Son December 18, 2024 0

Discover RiseLoader, a new malware family focused on efficient payload delivery. Get insights into its origins, similarities with RisePro, and advanced anti-analysis measures.

Chrome’s App-Bound Encryption Cracked: Open-Source Tool Bypasses Security Measure

• Open Source Tool

Chrome’s App-Bound Encryption Cracked: Open-Source Tool Bypasses Security Measure

Do Son October 27, 2024 0

Learn about the concerns surrounding Chrome's App-Bound Encryption and the decryption of protected keys by a newly released open-source tool.

Infostealers Overcome Chrome’s App-Bound Encryption, Threatening User Data Security

• Malware

Infostealers Overcome Chrome’s App-Bound Encryption, Threatening User Data Security

Do Son September 24, 2024 0

Learn about the latest threat to cybersecurity: infostealers that can bypass Chrome's App-Bound Encryption and compromise user data privacy.

UNC5537 Threatens Snowflake: Data Theft and Extortion Campaign Exposed

• Cyber Security

UNC5537 Threatens Snowflake: Data Theft and Extortion Campaign Exposed

Do Son June 10, 2024 0

Tracked as UNC5537, this financially motivated threat actor has systematically compromised hundreds of Snowflake customer accounts

Threat Actors Exploit GitHub to Spread Malware, Targeting Multiple Operating Systems

• Cyber Security
• Malware

Threat Actors Exploit GitHub to Spread Malware, Targeting Multiple Operating Systems

Do Son May 16, 2024 0

The campaign exploits GitHub, a legitimate platform for software development, to distribute various malware families

Hackers Exploit YouTube for Game Cracks, Steal Your Data

• Cyber Security
• Malware

Hackers Exploit YouTube for Game Cracks, Steal Your Data

Do Son April 3, 2024 0

threat actors are targeting consumer users, particularly younger audiences drawn to popular video games, by promoting cracked software