Zero-Dwell Threat Intelligence Reports

AuraStealer Campaign Using armydevice.shop for C2.exe

corrupt spreader

Vidar 15.3 Hides Command Traffic in Steam Profile.exe

long-sleeps detect-debug-environment idle spreader

DownloaderApp.exe Lumma’s Delivery Network.exe

long-sleeps spreader assembly executes-dropped-file

Stealc v2 Infostealer Uses Toxwebapp.com for C2.exe

long-sleeps spreader checks-cpu-name persistence

Trojanized MFC110U.DLL.dll

signed overlay invalid-signature idle corrupt

AutoIt-Based DarkCloud Malware Exfiltrates Data.exe

detect-debug-environment calls-wmi

Stealc v2 Linked to LogsDillerCloud Campaign.exe

64bits spreader persistence

LummaC v2 Infostealer Targets Windows Systems.exe

long-sleeps calls-wmi spreader malware

RC4-Encrypted Stealc v2 Payload.exe

64bits long-sleeps spreader persistence

Stealc v2 Infostealer Targets Windows Devices.exe

64bits idle spreader

Fake Imo Installer Deploys Rhadamanthys Backdoor.exe

signed 64bits calls-wmi invalid-signature spreader

Amadey-Linked Lumma Stealer.exe