The Gen Digital Threat Research Team profiles Torg Grabber, a MaaS credential stealer that is not just another Vidar clone. Early builds used Telegram for exfiltration, while later builds evolved to an encrypted TCP channel and a full REST API backend. https://www.gendigital.com/blog/insights/research/torg-grabber-credential-stealer-analysis