Sign up to save your podcasts
Or
Share CYFIRMA Research- LTX Stealer: Analysis of a Node.js–Based Credential Stealer
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
CYFIRMA Research- LTX Stealer: Analysis of a Node.js–Based Credential Stealer
Malware Spotlight: LTX Stealer
CYFIRMA researchers uncovered a sophisticated Windows info-stealer hidden in a legit Inno Setup installer.
Key takeaways:
🔹 Node.js stealer with Bytenode bytecode obfuscation
🔹 Targets Chromium browsers & crypto wallets
🔹 Persists in hidden/system folders under Program Files(x86)
🔹 Uses Supabase for operator auth + Cloudflare to mask backend
🔹 Commercial-grade Malware-as-a-Service (MaaS)
Modern attackers are using trusted installers + runtime decryption to evade detection. Stay vigilant!
Link to the Research Report: LTX Stealer : Analysis of a Node.js–Based Credential Stealer - CYFIRMA
#CyberSecurity #MalwareAnalysis #Infostealer #NodeJS #ThreatIntel #MaaS #CYFIRMA #CYFIRMAresearch #ExternalThreatLandscapeManagement #ETLM
https://www.cyfirma.com/
View all episodes
By CYFIRMAMalware Spotlight: LTX Stealer
CYFIRMA researchers uncovered a sophisticated Windows info-stealer hidden in a legit Inno Setup installer.
Key takeaways:
🔹 Node.js stealer with Bytenode bytecode obfuscation
🔹 Targets Chromium browsers & crypto wallets
🔹 Persists in hidden/system folders under Program Files(x86)
🔹 Uses Supabase for operator auth + Cloudflare to mask backend
🔹 Commercial-grade Malware-as-a-Service (MaaS)
Modern attackers are using trusted installers + runtime decryption to evade detection. Stay vigilant!
Link to the Research Report: LTX Stealer : Analysis of a Node.js–Based Credential Stealer - CYFIRMA
#CyberSecurity #MalwareAnalysis #Infostealer #NodeJS #ThreatIntel #MaaS #CYFIRMA #CYFIRMAresearch #ExternalThreatLandscapeManagement #ETLM
https://www.cyfirma.com/