New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration

**Fickle Stealer**, a new Rust-based information stealer, is being delivered via VBA droppers/downloaders, link and executable downloaders and PowerShell scripts that attempt UAC bypass; it performs anti-analysis checks, harvests browser data, crypto wallets, messaging and remote-access applications, collects targeted document and wallet files, and exfiltrates data (JSON) to attacker-controlled servers and a Telegram bot. The report also notes AZStealer, an open-source Python stealer advertised for Discord, which exfiltrates via Discord webhooks or Gofile and targets documents and credentials.