#инфостилер
-
Hackers Steal Tokens from Claude Subscribers via Infostealers
Claude users discovered their token limits were being burned through while they weren't working. Anthropic acknowledged the cause: attackers stealing login sessions with malware.
-
Malicious Solidity Pro Extensions for VS Code Steal Developers’ Wallets and Keys
Researchers at Yeeth Security have uncovered Solidity Pro extensions that, posing as tools for Ethereum developers, steal crypto wallets, tokens and API keys. The malware activates on a delay to slip past marketplace review and antivirus scanners.
-
Dolphin X Trojan Uses AI to Rank Victims by Value
A new infostealer with an “AI Profiler” feature automatically scores infected machines, helping attackers pick the most lucrative targets. The feature was spotted by researchers at Varonis Threat Labs.
-
Compromised jscrambler npm package installed a Rust infostealer
Version 8.14.0 of the popular npm package jscrambler turned out to be compromised: when installed, it launched a malicious binary that stole data. The incident was spotted just six minutes after publication.