#infostealer
-
REVSTEALER leaves four modules behind — one disables Windows Update and Defender to make room for a miner
Elastic Security Labs has documented four previously unknown programs tied to a new Windows stealer, REVSTEALER. Unlike the stealer itself, they persist on the system — and one of the modules muzzles the defenses to launch a cryptominer.
-
Coder Infrastructure Breach: Attackers Served Malicious Terraform Modules
Attackers infiltrated Coder's cloud infrastructure and spoofed its registry servers to distribute modules carrying credential-stealing code.