Vibrator virus steals your personal information

Malwarebytes details a confirmed infection in which a Spencer’s USB-rechargeable vibrator carried an MSI installer that dropped an obfuscated MSIL payload (Lumma stealer). The report includes technical analysis, IOCs (program name Outweep Dynes, installation folder, filenames, and three SHA256 hashes), describes the USB-based distribution vector and XML-bomb decoy, and provides mitigation advice (avoid charging via PC, use USB data blockers, keep endpoint protection enabled).