Redline Stealer being Distributed via Fake Express VPN Sites
released on 2022-12-01 @ 10:45:51 AM
A malicious Redline Stealer is being distributed via phishing sites impersonating Express VPN websites, according to research by Cyble Research & Intelligence Labs (CRIL). Redline Stealer is one of the most prominent InfoStealer. According to the authors' blog, there has been an increase in the number of samples padded with junk data to increase their size for evading detection. This technique is also seen implemented in stealers such as Vidar and RecordBreaker.