Trend MicroPublished
New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages
Excerpt
Malware
The BoryptGrab campaign uses fake SEO‑optimized GitHub repositories and deceptive download pages to distribute a data‑stealing malware family that delivers multiple payloads, including a reverse SSH backdoor, to Windows users.
Save to Folio
Key Takeaways
BoryptGrab is a newly identified stealer that harvests browser data, cryptocurrency wallet information, and system information. It is also capable of capturing screenshots, collecting common files, and extracting Telegram information, Discord tokens, and passwords.
The malware is distributed through a large number of…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Trend Micro on trendmicro.com.
Mentioned in the excerpt
More from Trend Micro18
- Lemon Group’s Cybercriminal Businesses Built on Preinfected DevicesTrend Micro · Published 17 May 2023
- Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures RevealedTrend Micro · Added 14 Oct
- Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux ImplantTrend Micro · Added 2 Sep
- Analyzing TeamPCP’s Supply Chain Attacks: Checkmarx KICS and elementary-data in CI/CD Credential TheftTrend Micro · Published 13 May
On the same topics
- StealC Is Back, and This Time It's a RATVaronis · Published 22 Oct
- Threat Group Cards: A Threat Actor EncyclopediaETDA Threat Group Cards · Added 25 Oct
- Warden Stealer: The Rapid Rise of an Infostealer with an Appetite for AI Agent DataGen Digital · Published 8 Oct
- Unmasking a Multi-Stage Loader: AutoIt Abuse Leading to Vidar Stealer Command-and-Control CommunicationLevelBlue · Published 7 May
