New Node.js Based LTX Stealer Attack Users to Exfiltrate Login Credentials

**LTX Stealer** is a newly observed Node.js-based info-stealer distributed via a deceptive Inno Setup installer ('Negro.exe') that drops a large (~271 MB) payload and executes a packaged Node.js binary ('updater.exe') compiled with Bytenode to steal Chromium saved passwords, cookies, cryptocurrency wallet data and screenshots before exfiltrating to cloud-backed C2 infrastructure (Supabase, Cloudflare); the report includes technical analysis of bytecode obfuscation, IOCs (e.g., eqp.lol), and recommended detection/mitigation steps.