Fake Microsoft Crypto Wallet Phishing Site Spreads Infostealer
ID: 867d00f4-01bc-504f-80a4-d23163090f18
STIX ID: report--867d00f4-01bc-504f-80a4-d23163090f18
Feed Name: Cyble Blog
Threat Score
Luca Stealer is being distributed via a phishing site impersonating a Microsoft Crypto Wallet; the Rust-based infostealer harvests credentials and crypto wallet data, includes a clipper to hijack crypto/IBAN transfers, uses AntiVM checks (WMI thermal query), exfiltrates via a Telegram bot, and is linked to provided IoCs (phishing URL and file hashes).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.