Netcrook
#Browser credentials
When the PoC Is the Payload: A GitHub Trap Built for Security Hunters
A reported campaign called ChocoPoC turns the normal rush for fresh exploit code into an infection path, using fake GitHub PoC repositories to deliver a Python RAT and target browser-stored secrets.
Fileless Phantom Stealer and the New War Over Browser Credentials
A malware campaign identified as Fileless Phantom Stealer combines memory-only execution with anti-analysis behavior while focusing on browser credentials, a pattern that complicates file-based detection.
Browser Theft, Packaged Like Software: The OnyxC2 Playbook
A newly surfaced stealer shows how credential theft is being sold as a subscription business, with a web panel, a builder, and Cloudflare-fronted infrastructure.
Browser Secrets in the Crosshairs: What SolyxImmortal Reveals About Modern Infostealers
A reported Python-based Windows infostealer combines browser credential theft, cookie harvesting, and Discord webhook exfiltration, showing how ordinary user data can become the fastest path to account takeover.
The Vidar Trail: A Credential Theft Case Where Attribution Gets Dangerous Fast
A reported Vidar Stealer campaign is said to target user credentials, but the visible evidence stops short of proving the North Korea-linked attribution attached to it.