Tag

Steganography

3 briefs RSS

ACR Stealer Campaigns Use ClickFix Lures, WebDAV, and Steganography for Credential Theft

Microsoft Defender Experts observed increased ACR Stealer activity from late April to mid-June 2026, using ClickFix social engineering lures in two distinct campaigns to steal browser credentials, authentication tokens, and sensitive documents from enterprise environments via WebDAV-based Python loaders or MSHTA-initiated PowerShell with steganography.

Windows ACR Stealer infostealer malware-as-a-service social-engineering webdav powershell steganography credential-theft data-exfiltration

2r 18t 2w ago

medium advisory

PureLogs Infostealer Delivered via PawsRunner Steganography

2 rules 1 TTP

A steganography-based malware campaign uses PawsRunner to deliver the PureLogs infostealer, highlighting evolving delivery methods.

PureLogs steganography infostealer malware

2r 1t May 15, 2026

critical threat

TeamPCP Backdoors Telnyx PyPI Package with Steganographic Malware

2 rules 5 TTPs

The TeamPCP threat actor compromised the Telnyx PyPI package, injecting credential-stealing malware hidden within WAV audio files to target Linux, macOS, and Windows systems.

TeamPCP supply chain attack pypi credential theft steganography

2r 5t Mar 28, 2026