Vidar Stealer 2.0 adds multi-threaded data theft, better evasion

Vidar Stealer 2.0 — Trend Micro reports that Vidar has been rewritten in C, adds multi-threaded data-stealing workers, extensive anti-analysis checks, and memory-injection techniques that can bypass Chrome AppBound encryption by extracting keys from browser memory; it targets browser data, cryptocurrency wallets, cloud credentials, Steam, Telegram and Discord, and exfiltrates via Telegram bots and URLs on Steam profiles, with activity rising since the release and expected growth through Q4 2025.