Bogus Avast website fakes virus scan, installs Venom Stealer instead

**Phishing campaign distributing Venom Stealer:** A fake Avast webpage lures users to download an executable (Avast_system_cleaner.exe) that installs Venom Stealer (copies itself as v20svc.exe), which harvests browser credentials, session cookies, crypto-wallet data and screenshots, then exfiltrates the data over unencrypted HTTP to app-metrics-cdn.com; the sample exhibits debugger and VM checks, direct system-call evasion, and was only detected by ~27% of VirusTotal engines.