China-nexus actor steals thousands of documents in monthslong exploitation campaign

China-nexus actor steals thousands of documents in monthslong exploitation campaign

Researchers suspect the hacker employed LLMs to develop custom tools.

Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer

Attackers impersonate LastPass and other brands to drop a kernel driver, disable security tools, and deploy the Rapuncel stealer.

New Rapuncel Infostealer Abuses Microsoft-Signed Driver to Disable 145 Security Tools

A newly identified information-stealing campaign, tracked as Rapuncel, is exploiting a Microsoft-attested kernel driver to terminate up to 145 antivirus… Read more →

Hackers Use Microsoft-Signed Driver to Disable 145 Security Tools and Steal Passwords

Researchers uncovered a malware campaign that used a Microsoft-attested Windows kernel driver to turn off 145 antivirus and endpoint security processes, then stole passwords, cryptocurrency wallet data, browser sessions, and other sensitive information. LastPass Threat Intelligence, Mitigation, and Escalation team, working with Delphos Labs, discovered the operation after attackers impersonated LastPass Authenticator through fraudulent GitHub pa…