Fake Bitdefender website used to spread infostealer malware

Cybercriminals deployed a typosquatted Bitdefender download page to distribute VenomRAT; the payload also includes StormKitty for stealing passwords and crypto wallet credentials and SilentTrinity for stealthy persistence. Bitdefender detected and flagged the malicious site and payload and is working with partners to remove the site, but attribution remains difficult since VenomRAT is widely traded on criminal forums.