A large-scale spear-phishing campaign distributing a VIP Keylogger variant sold as Malware-as-a-Service (MaaS). The campaign employs steganography, in-memory execution, and modular payload design to evade defenses while harvesting credentials across browsers, email clients, and collaboration tools. Researchers observed fraudulent purchase-order emails that encouraged victims to open an attached RAR file. The compressed archive contained an executable disguised […]

The post MaaS VIP Keylogger Campaign Uses Steganography to Steal Credentials at Scale appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

ClipXDaemon is a new Linux malware family that hijacks cryptocurrency clipboard data in X11 sessions, operating fully offline without any command‑and‑control (C2) infrastructure. It reuses a ShadowHS-style loader built with the public bincrypter framework but delivers a completely different, autonomous financial payload. ShadowHS used an obfuscated shell loader to deploy an in‑memory hackshell for long‑term […]

The post ClipXDaemon Malware Targets Crypto Users in Linux X11 Sessions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.