New MicroStealer Malware Actively Attacking Telecom & Education Sectors

MicroStealer is a newly identified infostealer spreading via fake installers and malicious downloads; it uses a multi-stage NSIS→Electron→Node.js→Java JAR chain, performs environment checks to evade analysis, harvests credentials, session tokens, screenshots and wallet files, and exfiltrates data via Discord webhooks and attacker-controlled servers—primarily impacting telecom and education organizations with low antivirus detection during early campaigns.