Zero-Dwell Threat Intelligence Reports

AsyncRAT Variant Masquerading as libpsl-5.dll.dll

64bits overlay idle spreader

Fake Windows OOBE Broker Drops ClipBanker Trojan.exe

long-sleeps calls-wmi idle assembly

Fake Chrome Updater Exfiltrates Passwords / Cookies.exe

64bits overlay detect-debug-environment

Betternet Installer Delivers RadThief Payload.exe

signed overlay calls-wmi invalid-signature idle

AuraStealer Campaign Using armydevice.shop for C2.exe

corrupt spreader

Vidar 15.3 Hides Command Traffic in Steam Profile.exe

long-sleeps detect-debug-environment idle spreader

DownloaderApp.exe Lumma’s Delivery Network.exe

long-sleeps spreader assembly executes-dropped-file

Stealc v2 Infostealer Uses Toxwebapp.com for C2.exe

long-sleeps spreader checks-cpu-name persistence

Trojanized MFC110U.DLL.dll

signed overlay invalid-signature idle corrupt

AutoIt-Based DarkCloud Malware Exfiltrates Data.exe

detect-debug-environment calls-wmi

Stealc v2 Linked to LogsDillerCloud Campaign.exe

64bits spreader persistence

LummaC v2 Infostealer Targets Windows Systems.exe

long-sleeps calls-wmi spreader malware