home.social

#phantomstealer — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #phantomstealer, aggregated by home.social.

fetched live
  1. James_inthe_box @[email protected] ·

    #phantomstealer dropping #chomelevator

    app.any.run/tasks/65f964b6-958

    exfils to mail.trimnt\.com

    #phantomstealer #chomelevator
  2. The Threat Codex @[email protected] ·

    Phantom Stealer Analysis: Inside the Two-Layer Attack Chain Hidden Behind a Windows DLL
    #PhantomStealer
    blog-wp.darkatlas.io/2026/05/1

    #phantomstealer
  3. Brad @[email protected] ·

    2026-03-23 (Monday): #PhantomStealer version 3.5.0 sent as an email attachment.

    .js file sample from the attachment: bazaar.abuse.ch/sample/8606c08

    PowerShell script retrieved by the above .js file: bazaar.abuse.ch/sample/a0d7249

    #phantomstealer
  4. The Threat Codex @[email protected] ·

    From XLoader to Phantom Stealer: A DHL-Themed multi-stage Infection Chain
    #PhantomStealer
    medium.com/@mk7912/from-xloade

    #phantomstealer
  5. James_inthe_box @[email protected] ·

    2nd time I've seen #xworm dropping #phantomstealer so might as well share:

    app.any.run/tasks/f2961848-ef2

    #xworm #phantomstealer
  6. The Threat Codex @[email protected] ·

    Not Safe for Work: Tracking and Investigating Stealerium and Phantom Infostealers
    #Stealerium #TA2715 #TA2536 #PhantomStealer
    proofpoint.com/us/blog/threat-

    #stealerium #ta2715 #ta2536 #phantomstealer