Cybersecurity articles tagged #Information Stealer on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/revstealer-modules-disable-defenses-deploy-miner-steal-datahttps://runtimerebel.com/blog/revstealer-modules-disable-defenses-deploy-miner-steal-dataElastic Security unveils four REVSTEALER-linked modules that disable Windows defenses, deploy crypto miners, and exfiltrate sensitive user data.Sun, 06 Sep 2026 17:53:44 GMTInformation StealerCryptominingWindows UpdateREVSTEALERWindows Defenderhttps://runtimerebel.com/blog/solidity-pro-vs-code-extensions-steal-crypto-wallets-credentialshttps://runtimerebel.com/blog/solidity-pro-vs-code-extensions-steal-crypto-wallets-credentialsMalicious 'Solidity Pro' VS Code extensions steal crypto wallets, API keys, and credentials, using delayed activation to evade detection. Immediate removal is advised.Mon, 10 Aug 2026 09:08:16 GMTVS CodeInformation StealerCredential TheftSupply Chain AttackSolidity Prohttps://runtimerebel.com/blog/bing-ads-promote-fake-claude-app-deliver-sectoprat-malwarehttps://runtimerebel.com/blog/bing-ads-promote-fake-claude-app-deliver-sectoprat-malwareA malvertising campaign on Bing Search is distributing a fake Claude AI desktop app, leading to SectopRAT malware infections. Verify software sources.Thu, 23 Jul 2026 21:06:56 GMTSectop RATMalvertisingBing AdsClaude AIInformation StealerPhishinghttps://runtimerebel.com/blog/clicklock-macos-malware-password-theft-via-forced-login-prompthttps://runtimerebel.com/blog/clicklock-macos-malware-password-theft-via-forced-login-promptClickLock macOS malware terminates processes, simulating a system crash to force users into revealing their login password.Fri, 17 Jul 2026 02:45:47 GMTmacOSClickLockInformation StealerPassword TheftSocial Engineeringhttps://runtimerebel.com/blog/crashstealer-new-macos-info-stealer-bypasses-gatekeeper-via-notarizationhttps://runtimerebel.com/blog/crashstealer-new-macos-info-stealer-bypasses-gatekeeper-via-notarizationCrashStealer macOS malware leverages C++ and notarized droppers to evade security checks and exfiltrate validated credentials from compromised Apple devices.Mon, 13 Jul 2026 20:57:57 GMTCrashStealermacOS SecurityInformation StealerGatekeeper BypassJamf Threat Labshttps://runtimerebel.com/blog/veil-drop-attacks-deploy-purelog-info-stealer-via-blogspot-powershellhttps://runtimerebel.com/blog/veil-drop-attacks-deploy-purelog-info-stealer-via-blogspot-powershellAnalysis of Veil#Drop attacks, a sophisticated framework abusing Blogspot and PowerShell to deploy PureLog information stealer with fileless techniques and evasion.Mon, 06 Jul 2026 21:40:18 GMTVeil DropPureLogInformation StealerBlogspotPowerShellFileless MalwareSecuronixhttps://runtimerebel.com/blog/oxloader-analysis-malicious-google-ads-deliver-castlestealer-malwarehttps://runtimerebel.com/blog/oxloader-analysis-malicious-google-ads-deliver-castlestealer-malwareResearchers have identified OXLOADER, a new malware loader using malicious Google Ads to distribute the CastleStealer information stealer to Windows users.Mon, 22 Jun 2026 14:00:29 GMTOXLOADERCastleStealerMalvertisingGoogle AdsInformation Stealerhttps://runtimerebel.com/blog/miasma-compromises-73-microsoft-github-repos-incident-analysishttps://runtimerebel.com/blog/miasma-compromises-73-microsoft-github-repos-incident-analysisMicrosoft restores some GitHub repositories after 73 projects were hit by Miasma's supply chain attack to inject information stealers. Learn detection steps.Tue, 09 Jun 2026 17:00:07 GMTGitHubMiasmaMicrosoftSupply Chain AttackInformation StealerOpen Source Securityhttps://runtimerebel.com/blog/uac-0247-targets-ukrainian-healthcare-via-data-theft-malwarehttps://runtimerebel.com/blog/uac-0247-targets-ukrainian-healthcare-via-data-theft-malwareUAC-0247 is targeting Ukrainian clinics and government entities using malware designed to steal data from WhatsApp and Chromium-based browsers.Thu, 16 Apr 2026 08:40:22 GMTUAC 0247UkraineHealthcare SecurityInformation StealerData Thefthttps://runtimerebel.com/blog/crystalrat-malware-a-new-maas-threat-with-rat-stealer-and-prankwarehttps://runtimerebel.com/blog/crystalrat-malware-a-new-maas-threat-with-rat-stealer-and-prankwareCrystalRAT is a new malware-as-a-service (MaaS) promoted on Telegram, offering remote access, data theft, keylogging, and system disruption features, posing a…Thu, 02 Apr 2026 00:37:19 GMTCrystalRATMalware as a ServiceRATInformation StealerKeyloggerPrankwareTelegramhttps://runtimerebel.com/blog/glassworm-malware-uses-solana-dead-drops-for-stealthy-c2-deliveryhttps://runtimerebel.com/blog/glassworm-malware-uses-solana-dead-drops-for-stealthy-c2-deliveryGlassWorm evolves to use Solana blockchain metadata for C2 infrastructure, deploying a RAT and a malicious Google Docs Chrome extension to steal crypto data.Wed, 25 Mar 2026 16:31:31 GMTGlassWormSolanaRATInformation StealerBlockchain Dead Drops