New 'VietCredCare' Stealer Targeting Facebook Advertisers in Vietnam
ID: cd1093de-a322-5de9-9a12-eec1655ea0a4
STIX ID: report--cd1093de-a322-5de9-9a12-eec1655ea0a4
Feed Name: The Hacker News
Group-IB and The Hacker News detail VietCredCare, a .NET-based info stealer active since at least August 2022 that targets Vietnamese Facebook account managers to exfiltrate cookies, credentials, and session IDs (from Chrome, Edge, Cốc Cốc), determine business/ad credit status, evade detection (AMSI/Windows Defender exclusions), and enable account takeover; it is offered as stealer-as-a-service with Telegram-based management and has been used against government, academic, banking, and commercial profiles for political posts and financial scams.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.