A layered information stealer: staged loading and persistent collection
Originally publishedHuorong Security
The analysed malware separates interference, encrypted packaging and data collection into modules to resist inspection. Distribution includes phishing messages and fake download sites.
Key points
Targets include documents, browser credentials and business keys.
Persistence may allow attackers to deploy further malicious modules.
Isolate suspicious endpoints, retain logs and contact support.