Filtered by tag: fake software × Clear
Hackers Deploy ArmorSteal Malware Through Fake Software Downloads to Steal Credentials and Mine Crypto
Matched: health
Hackers are spreading Python-based malware called ArmorSteal through fake download pages impersonating tools like Chocolatey and Microsoft Activation Scripts. Victims are tricked into running PowerShell commands that install the real software while silently dropping malware into a disguised Windows folder. The kit steals passwords, crypto wallets, Discord tokens, and browser data, while also mining Monero. It evades detection by shutting down when monitoring tools are open and checking if it's running in a cloud sandbox.