Mastodawn

Varonis, posted yesterday: A Quiet "Storm": Infostealer Hijacks Sessions, Decrypts Server-Side https://www.varonis.com/blog/storm-infostealer

Infosecurity-Magazine: New 'Storm' Infostealer Remotely Decrypts Stolen Credentials https://www.infosecurity-magazine.com/news/storm-infostealer-remotely/ #infosec #threatresearch

A Quiet "Storm": Infostealer Hijacks Sessions, Decrypts Server-Side

Meet Storm, a new infostealer that tiptoes around endpoint security tools, remotely decrypts browser credentials, and lets operators restore hijacked sessions.