StegaBin Uses Pastebin Steganography to Deploy Credential Stealer

According to Security Affairs, the Malware Newsletter Round 87, authored by Pierluigi Paganini, was published on 8 March 2026 and presents a curated collection of malware research from the international landscape. The roundup includes items such as StegaBin: 26 Malicious npm Packages Use Pastebin Steganography to Deploy Multi-Stage Credential Stealer, and Inside a fake Google security check that becomes a browser RAT, among others.

It also highlights SloppyLemming Deploys BurrowShell and Rust-Based RAT to Target Pakistan and Bangladesh, Silver Dragon Targets Organizations in Southeast Asia and Europe, and Exposing a Russian Campaign Targeting Ukraine Using New Malware Duo: BadPaw and MeowMeow. Additionally, the newsletter points to Dust Specter APT Targets Government Officials in Iraq and InstallFix: How attackers are weaponizing malvertized install guides, as well as related analyses from other security researchers. The page culminates with quick links to related pieces and a sign-off from Pierluigi Paganini.