Infostealer Malware Distributed Using Bundled Installer: Key Threats

**Executive Summary:** This report documents the Temp Loader and Temp Stealer campaign—malware sold on Dark Web forums and distributed via bundled/cracked installers—that targets >40 crypto wallets, browser credentials, Telegram/Steam/Discord artifacts and system data, exfiltrates to identified IPs (79.137.199.73, 157.90.126.84), includes multiple file hashes as IOCs, and provides persistence and anti-analysis features alongside mitigation recommendations.