#credential-theft

Bitwarden CLI Hit by Supply Chain Attack via Malicious npm

Attackers compromised the official Bitwarden CLI npm package with credential-stealing malware that could self-propagate across development environments.

NPM Supply Chain Attack Steals Developer Credentials

A sophisticated supply chain attack targeting Node Package Manager is compromising developer accounts and spreading malicious packages across the ecosystem.

AgingFly Malware Targets Government and Healthcare Sectors

New AgingFly malware family steals authentication data from Chromium browsers and WhatsApp, targeting local governments and hospitals worldwide.

VENOM PhaaS Platform Targets C-Suite Credentials

Threat actors deploy VENOM phishing-as-a-service platform to steal executive credentials across multiple industries through sophisticated social engineering campaigns.

UAT-10608 Hackers Target Next.js Apps with React2Shell Tool

Threat group UAT-10608 exploits vulnerable Next.js applications using React2Shell automation to steal credentials and system secrets.

DeepLoad Malware Uses ClickFix Tactics for Credential Theft

Cybercriminals deploy DeepLoad malware loader through ClickFix social engineering campaigns, targeting user credentials with AI-assisted evasion techniques.

Infinity Stealer Targets macOS with Python-Based Payload

New Infinity Stealer malware uses Python and Nuitka compiler to steal credentials from macOS systems through sophisticated social engineering campaigns.

Torg Grabber Infostealer Targets 728 Crypto Wallets via ClickFix PowerShell Attack

A newly identified infostealer named Torg Grabber is actively targeting 728 cryptocurrency wallet extensions across 25 browsers, using ClickFix-based PowerShell lures for initial access. Researchers at Gen Digital discovered 334 unique samples developed in just three months, with new command-and-control infrastructure deployed weekly.

Storm-2561 Deploys Fake VPN Apps to Steal Credentials

Threat group Storm-2561 distributes malicious VPN clients through search engine manipulation to harvest user login credentials.