News
threat-intel Russian Hackers Create Fake US and UK Websites to Target Visitors With Mobile Exploits - GBHackers cybersecurity AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks - SecurityWeek threat-intel Google Patches Critical Android RCE Flaws That Let Attackers Execute Code Without User Interaction - GBHackers cybersecurity Google Fixes 208 Android Vulnerabilities, Including Critical Zero-Click RCE Flaws - CyberPress cybersecurity CISA flags WordPress RCE flaw as actively exploited in attacks - BleepingComputer cybersecurity Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads - The Hacker News threat-intel CISA Warns of Active Attacks Exploiting WordPress Core Code Execution Vulnerability - GBHackers threat-intel Hackers Use Stolen Microsoft Entra ID App Credentials to Breach 27 Organizations and Steal Sensitive Data - GBHackers cybersecurity Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory - The Hacker News threat-intel Cloudflare Launches Zero Wire to Track Critical Vulnerabilities and Active Exploitation Across the Internet - GBHackers threat-intel 3AM Ransomware Hackers Use AI-Assisted Attacks to Breach UK Schools and Spread Across Windows Domains - GBHackers cybersecurity China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor - The Hacker News cybersecurity mSecure Password Manager Warns Users to Reset Passwords, 2FA and Passkeys After Security Incident - CyberPress cybersecurity Hackers Use BeautyStealer Malware to Steal Browser Passwords and Sensitive Files Before Erasing Evidence - CyberPress cybersecurity APT29 Hackers Poison Websites to Target iPhones and Android Phones Without Users Clicking Anything - CyberPress
1 / 15
All news ›
Cybersecurity

Hackers Use BeautyStealer Malware to Steal Browser Passwords and Sensitive Files Before Erasing Evidence

CyberPress ·

ESET researchers have exposed a Russia-aligned threat group they named Gorbag. The group uses the BeautyStealer infostealer to grab browser passwords and sensitive files from Ukrainian organizations, and the malware then deletes itself. Gorbag has been active since at least February 2025 and targets only Ukraine. The group avoids long-term access. It collects browser credentials, […] The post Hackers Use BeautyStealer Malware to Steal Browser Passwords and Sensitive Files Before Erasing Evidence appeared first on Cyber Security News .

Continue on CyberPress ↗ ‹ All news Get the newsletter

The summary and image come from CyberPress; the image is shown from their website.