New Rilide Malware stealing credentials, targeting enterprise employees and crypto wallets. Bypasses Chromium browser manifest v3. Targets banking accounts in Australia and UK. Takes screenshots and sends stolen data to a Telegram channel. Can enable/disable browser extensions, retrieve browser history/cookies, steal login credentials, take screenshots, and inject malicious scripts. Masquerades as a Palo Alto GlobalProtect VPN extension. Linked to Twitter campaigns and NFT games. Indicators of compromise released by Trustwave. #cybersecurity #malware
Discussion
No replies yet.