Alleged Meduza Stealer malware admins arrested after hacking Russian org

Russian authorities announced arrests of three alleged creators/operators of the Meduza info-stealer, a malware-as-a-service that stole browser-stored credentials and crypto wallet data and could "revive" expired Chrome authentication cookies to facilitate account takeovers; the group is also linked to Aurora Stealer and reportedly developed a botnet capable of disabling security protections. The arrests followed a reported compromise of an institution in Astrakhan, which prompted a criminal case under Russian law, and authorities say they are continuing to identify accomplices.