Topic

Credential stealers

Malware that harvests saved passwords, session cookies, wallet files and stored secrets from a compromised machine and uploads them to an attacker-controlled server.

Current clusters

build1 publisher

A Microsoft-signed driver in a fake LastPass installer kills 145 security processes from the kernel

Alinubx.sys terminates security agents from kernel mode under a Microsoft Windows Hardware Compatibility Publisher signature dated March 2023, and nothing in the driver has to be exploited for that to work.

Publishers:dev.to

Reality

Evidence62
Adoption40
Hype gap+8
Incentives55
Confidence55