infostealer malware

Have I Been Pwned adds 284M accounts stolen by infostealer malware

February 27, 2025February 27, 2025 geekfeed0Tagged 284M accounts stolen, Credential Theft, credentials, Have I Been Pwned, haveibeenpwned, Infostealer, infostealer malware, malware

The Have I Been Pwned data breach notification service has added over 284 million accounts stolen by information stealer malware and found on a Telegram channel. HIBP founder Troy Hunt says he found 284,132,969 compromised accounts while analyzing 1.5TB of stealer logs likely collected from numerous sources and shared on a Telegram channel known as “ALIEN TXTBASE.” “They […]

3 mins read

Botnet targets Basic Auth in Microsoft 365 password spray attacks

February 24, 2025February 24, 2025 geekfeed0Tagged Account takeover, Basic Authentication, Botnet, infostealer malware, massive botnet, Microsoft 365, Password Spray

A massive botnet of over 130,000 compromised devices is conducting password-spray attacks against Microsoft 365 (M365) accounts worldwide, targeting basic authentication to evade multi-factor authentication. According to a report by SecurityScorecard, the attackers are leveraging credentials stolen by infostealer malware to target the accounts at a large scale. The attacks rely on non-interactive sign-ins using […]

3 mins read

Fake LDAPNightmware exploit on GitHub spreads infostealer malware

January 12, 2025January 12, 2025 geekfeed0Tagged CVE-2024-49113, CVE-2024-49113 exploit, exploit, GitHub, Information Stealer, infostealer malware, LDAPNightmware, LDAPNightmware exploit, malware, poc, proof-of-concept

A deceptive proof-of-concept (PoC) exploit for CVE-2024-49113 (aka “LDAPNightmare”) on GitHub infects users with infostealer malware that exfiltrates sensitive data to an external FTP server. The tactic isn’t novel, as there have been multiple documented cases of malicious tools disguised as PoC exploits on GitHub. However, this case, discovered by Trend Micro, highlights that threat actors continue to […]

2 mins read

New Glove infostealer malware bypasses Chrome’s cookie encryption

November 15, 2024November 15, 2024 geekfeed0Tagged google chrome, Information Stealer, Information-stealing malware, Infostealer, infostealer malware, malware, Stealer

New Glove Stealer malware can bypass Google Chrome’s Application-Bound (App-Bound) encryption to steal browser cookies. As Gen Digital security researchers who first spotted it while investigating a recent phishing campaign said, this information-stealing malware is “relatively simple and contains minimal obfuscation or protection mechanisms,” indicating that it’s very likely in its early development stages. During […]

3 mins read