With my intense focus on hunting down #ClickFix, some payloads are more interesting than others. Read my new analysis about #GloveStealer, which has the capability to bypass #AppBound encryption via the usage of the #IElevator service. Besides stealing browser data, the malware also searches for 84 locally installed apps and 280 browser extensions(!), focusing on crypto, 2FA authenticators, password managers, gaming platforms, and more.
Read the analysis here:
https://www.gendigital.com/blog/news/innovation/glove-stealer