From fake Proton VPN sites to gaming mods, this Windows infostealer is everywhere

Multiple campaigns are distributing NWHStealer through diverse platforms including fake VPN downloads, hardware utilities, and gaming modifications. The infostealer collects browser data, saved passwords, and cryptocurrency wallet information. Distribution occurs via fake websites impersonating legitimate services like Proton VPN, code hosting platforms such as GitHub and GitLab, file hosting services including MediaFire and SourceForge, and links from YouTube videos. Two primary infection methods are analyzed: one using a free web hosting provider distributing malicious ZIP files with self-injection loaders, and another employing fake websites with DLL hijacking techniques that inject into the RegAsm process. The stealer targets over 25 cryptocurrency wallets and multiple browsers, exfiltrating data to command-and-control servers using AES-CBC encryption and maintaining persistence through scheduled tasks and UAC bypass techniques.

Pulse ID: 69dfb91808e1258915184d6e
Pulse Link: https://otx.alienvault.com/pulse/69dfb91808e1258915184d6e
Pulse Author: AlienVault
Created: 2026-04-15 16:13:12

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #CyberSecurity #ELF #Encryption #GitHub #InfoSec #InfoStealer #OTX #OpenThreatExchange #Password #Passwords #RAT #RCE #VPN #Windows #Word #YouTube #ZIP #bot #cryptocurrency #AlienVault

LevelBlue - Open Threat Exchange

Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

LevelBlue Open Threat Exchange

Frieren's naughty plan to compensate her extravagant shopping spree got Fern hooked once she got a taste of her first well-endowed customer 🍆🙀

(Total time spent on piece: ~150h)

#NSFW #nsfwart #nsfwartist #DigitalArt #lingerie #seethrough #thighhighs #nude #ass #tits #cum #pubic-hair #lewd #art #goth #porn #big-tits #big-ass #penetration #gangbang #lewd #frieren #anime #frierenbeyondjourneysend #sousounofrieren #elf #fern #MastoArt #Fediart

Hi it’s me posting human art to my furry audience and praying for 5 likes

#art #artwork #fantasyart #wow #worldofwarcraft #portrait #elf #draenei #headshot

ASO RAT: Arabic-Language Android Surveillance Platform Targeting Syria

ASO RAT is a custom Android Remote Access Trojan featuring comprehensive device compromise capabilities including SMS interception, camera access, GPS tracking, call logging, file exfiltration, and DDoS functionality. Operating from Frankfurt-based infrastructure with connections to Syria, the platform disguises itself as PDF readers and Syrian government applications. Investigation revealed two active C2 servers, four DDNS domains, eight malicious APK samples with the newest achieving 0/66 antivirus detections, and complete reverse-engineered panel architecture exposing 21 API endpoints. The multi-user panel with role-based access control suggests RAT-as-a-Service operations. Infrastructure includes historical VPS providers and Starlink satellite connections geolocated to Syria. The developer's Arabic-language interface and Syria-themed lures indicate targeting of opposition figures, journalists, and military personnel within the Syrian conflict theater.

Pulse ID: 69dd062fb9ecc388e52457d3
Pulse Link: https://otx.alienvault.com/pulse/69dd062fb9ecc388e52457d3
Pulse Author: AlienVault
Created: 2026-04-13 15:05:19

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#APK #Android #Arabic #CyberSecurity #DDoS #DNS #DoS #ELF #Endpoint #Government #InfoSec #Military #OTX #OpenThreatExchange #PDF #RAT #RCE #RemoteAccessTrojan #SMS #Syria #Trojan #bot #AlienVault

LevelBlue - Open Threat Exchange

Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

LevelBlue Open Threat Exchange
I’ll come back for their stories

While I do have some major projects I want to focus on, I do have stories for some of my characters that I want to make into a comic. I’ll definitely make those someday.

#drawing #traditionaldrawing #ballpointpendrawing #originalcharacter #oc #elf #artsona #undead #webcomic #comic

🧝‍♀️🧝 ELF APRIL! 🧝🧝‍♀️

Ready for another year's big elf sale! Elves, half-elves, elf-adjacent races from various games, series, TTRPGs, etc! Only available this month and then it's completely gone until next year!

ORDER HERE:
🧝 [ http://maddiebiscuitsart.com ]
[ #art #elf #elves #commission #commsopen ]

About to go for it

Maybe I’m feeling too ambitious, but I plan to work on two big projects to really put myself out there. Although, I will still post other drawings on my spare time.

#drawing #traditionaldrawing #ballpointpendrawing #originalcharacter #oc #Elf #artsona #undead #webcomic #comic