HIGH Malware
Vidar Stealer & XMRig Campaign Leverages Malvertising, AMSI Bypass
Financially motivated campaign delivers Vidar stealer and XMRig miner via malvertising for cracked software, targeting consumers and SMBs globally.
- Vidar stealer and XMRig miner are distributed via malvertising for pirated software, impacting consumers and SMBs.
- Affected systems receive malware through Go loaders employing code signing abuse and anti-forensic techniques.
- Defenders must educate users on safe downloads and enhance security tooling against file padding and AMSI bypasses.
Runtime Rebel Intel
5 min read · Aug 9, 2026