Strela Stealer Targets Europe Stealthily Via WebDav

Strela Stealer is being distributed via spear-phishing ZIP attachments containing heavily obfuscated JavaScript that executes a base64-encoded PowerShell command to load a malicious DLL from a WebDAV server and run an infostealer in memory; the malware harvests Outlook and Thunderbird credentials, collects system information, and uses locale checks to target German and Spanish victims, with extensive IOCs and mitigation guidance provided.