Zero-Dwell Threat Intelligence Reports

Trojanized Qlcapgtwpsw.exe Adds Defender Exclusions and Harvests Logins.exe

spreader assembly

Trojanized Screenshot Tool Captures Desktop and Steals Data.bin

64bits long-sleeps detect-debug-environment

Lumma Stealer Bundled as “Tiger Youtube Bot” Installer.exe

spreader malware

Trojanized dOyX.exe Uses PowerShell Exclusions to Evade Defender.exe

long-sleeps calls-wmi spreader assembly

Lumma/Stealc Dropper Executes via regsvr32 and MSBuild.exe

spreader

Packed MSIL Trojan Phones Home to Telegram and SMTP.exe

spreader assembly

Rhadamanthys Stealer Delivered by Fake Installer.exe

detect-debug-environment checks-user-input spreader

OOBE Imposter Snatches Clipboard Keys.exe

64bits spreader

Sliver RAT Surfaces as Routine Logging Utility.exe

64bits long-sleeps calls-wmi spreader persistence

Sliver Backdoor Impersonates Syslog Utility.exe

checks-user-input idle

Windows OOBE Trojan Steals Clipboard Funds.exe

64bits spreader

ClipBanker Stealer Masquerades as UserOOBEBroker.exe.exe

assembly