Logins.zip Leverages Chromium Zero-Day: Stealthy Infostealer Builder Promises 99% Credential Theft in Under 12 Seconds
ID: 7a841374-2a51-5762-8416-70f3dd2c4a04
STIX ID: report--7a841374-2a51-5762-8416-70f3dd2c4a04
Feed Name: infostealers.com
Hudson Rock researchers detail 'Logins.zip', a compact, browser-focused infostealer builder exploiting undisclosed Chromium flaws to rapidly harvest credentials, cookies, autofills, and payment data (claimed up to 99% recovery). The builder emphasizes evasion (polymorphic obfuscation, direct syscalls, anti-sandbox/anti-debug), modular theft (Discord tokens, Roblox, crypto wallets), and easy operator access via a web-based builder and exfiltration through bots; Hudson Rock validated unique samples and observed active underground promotion and apparent rapid adoption. Recommended mitigations include browser hardening, enforcing MFA, credential rotation, and EDR tuned for userland syscall/process injection behaviors.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.