ThreatsDay: Game Cheat Spyware, Spirals Ransomware, Chrome Sync Stalking

This weekly roundup highlights three prioritized threats: a NuGet supply-chain poisoning that distributed a downloader (pepesoft.exe) via GitHub, Hugging Face, and BitTorrent fallbacks; Spirals, a Rust-based ransomware family that propagated network-wide within ~24 hours using IIS webshells, SAM hive dumping, and PsExec; and a rising abuse of Chrome Sync where brief physical access allows persistent exfiltration of browsing data and saved credentials. The report includes detection and mitigation recommendations for package hygiene, IIS hardening and post-exploitation telemetry, and Chrome account/policy controls.