Diaries by Keyword - SANS Internet Storm Center

Handler on Duty: Didier Stevens

Threat Level: green

Date	Author	Title
2024-11-07	Xavier Mertens	Steam Account Checker Poisoned with Infostealer
2024-10-09	Xavier Mertens	From Perfctl to InfoStealer
2024-09-18	Xavier Mertens	Python Infostealer Patching Windows Exodus App
2024-08-27	Xavier Mertens	Why Is Python so Popular to Infect Windows Hosts?
2024-05-31	Xavier Mertens	"K1w1" InfoStealer Uses gofile.io for Exfiltration
2024-02-20	Xavier Mertens	Python InfoStealer With Dynamic Sandbox Detection
2024-01-25	Xavier Mertens	Facebook AdsManager Targeted by a Python Infostealer
2023-12-22	Xavier Mertens	Shall We Play a Game?
2023-09-29	Xavier Mertens	Are You Still Storing Passwords In Plain Text Files?
2023-05-04	Xavier Mertens	Infostealer Embedded in a Word Document
2023-03-01	Xavier Mertens	Python Infostealer Targeting Gamers
2022-12-18	Guy Bruneau	Infostealer Malware with Double Extension
2022-08-11	Xavier Mertens	InfoStealer Script Based on Curl and NSudo
2022-03-09	Xavier Mertens	Infostealer in a Batch File
2021-12-21	Xavier Mertens	More Undetected PowerShell Dropper
2021-04-06	Jan Kopriva	Malspam with Lokibot vs. Outlook and RFCs
2021-03-31	Xavier Mertens	Quick Analysis of a Modular InfoStealer
2019-10-09	Brad Duncan	What data does Vidar malware steal from an infected host?
2019-01-24	Brad Duncan	Malspam with Word docs uses macro to run Powershell script and steal system data