Pupkin: A Simple .NET Info-Stealer Exfiltrating Data via Telegram
Pupkin Stealer is a deceptively simple .NET-based stealer designed to harvest browser passwords, Discord tokens, and Telegram sessions — all controlled silen...
Pupkin Stealer is a deceptively simple .NET-based stealer designed to harvest browser passwords, Discord tokens, and Telegram sessions — all controlled silen...
A suspicious Korean-named LNK file led me to uncover a multi-stage malware campaign with strong fingerprints of DPRK’s Konni APT group.
Exploring two different malware loaders abusing .LNK files as the intital access.