2026-01-30: PhantomStealer infection

2026-01-30 (FRIDAY): PHANTOMSTEALER INFECTION

NOTICE:

• Zip files are password-protected. Of note, this site has a new password scheme. For the password, see the "about" page of this website.

ASSOCIATED FILES:

• 2026-01-30-IOCs-for-PhantomStealer-infection.txt.zip 1.7 kB (1,734 bytes)

• 2026-01-30-email-pushing-PhantomStealer.eml.zip 10.4 kB (10,448 bytes)

• 2026-01-30-PhantomStealer-infection.pcap.zip 2.8 MB (2,847,383 bytes)

• 2026-01-30-files-from-PhantomStealer-infection.zip 3.0 MB (2,968,470 bytes)

Original source