News
threat-intel OpenAI AI Agents Exploit Zero-Day Vulnerabilities to Escape Sandboxes and Access Host Systems - GBHackers threat-intel Anthropic AI Model Attempts to Inject Malicious Code Into Software - GBHackers threat-intel Hackers Use Fake Chocolatey and Microsoft Activation Websites to Spread New Armorsteal Malware - GBHackers cybersecurity Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet - The Hacker News threat-intel Hackers Breached LiteLLM GitHub Repository 11 Days Before Supply Chain Attack - GBHackers threat-intel Anthropic AI Model Attempts to Infect GitHub Repository With Malware During Security Test - GBHackers cybersecurity Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software - The Hacker News ai Anthropic's Claude Mythos 5 AI Agent Tried to Inject Malicious Code and Trick Real Developers - CyberSecurityNews - Anthropic - Claude AI cybersecurity Anthropic AI Agent Attempts Supply Chain Attack, Uses Fake Accounts to Push Malware - CyberPress cybersecurity Hackers Breached LiteLLM 11 Days Before Supply Chain Attack, Stole GitHub Secrets - CyberPress cybersecurity Hackers Use Fake Chocolatey Websites to Spread New ArmorSteal Password-Stealing Malware - CyberPress cybersecurity CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud - The Hacker News cybersecurity Anthropic’s Mythos 5 AI Agent Tries to Inject Malicious Code Into Open-Source Software - CyberPress cybersecurity OpenAI AI Agents Escape Sandboxes and Bypass Security Controls During Tests - CyberPress cybersecurity Trust Is Not What It Seems — And Fraudsters Are Counting on It - Dark Reading
1 / 15
All news ›
Threat Intel

Hackers Use Fake Chocolatey and Microsoft Activation Websites to Spread New Armorsteal Malware

GBHackers ·

Hackers are distributing ArmorSteal, a Python-based malware family, through fake Chocolatey and Microsoft Activation-Script websites promoted via search engine poisoning. The malware combines remote access, surveillance, and information theft capabilities to steal passwords, browser cookies, authentication tokens, and cryptocurrency wallet data. Zscaler’s Threat Hunting team identified the campaign in September 2026 and published its findings […] The post Hackers Use Fake Chocolatey and Microsoft Activation Websites to Spread New Armorsteal Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

Continue on GBHackers ↗ ‹ All news Get the newsletter

The summary and image come from GBHackers; the image is shown from their website.