VVS Stealer, a new python malware steals Discord credentials

**VVS Stealer** is a Python-based infostealer sold via Telegram (since at least April 2025) that uses PyInstaller and heavy Pyarmor obfuscation to steal Discord credentials/tokens, browser passwords, cookies, and other system data, hijack sessions via injected JavaScript, maintain persistence, and exfiltrate data through Discord webhooks; Palo Alto Networks researchers deobfuscated and analyzed samples to reveal these capabilities and the malware's technical details.