An threat actor known as "Redlogs" distributed a sophisticated infostealer malware (likely a variant of RedLine or Raccoon Stealer) hidden inside fake software cracks on torrent sites. Over the course of a month, 9,000 unsuspecting users downloaded the file, allowing the malware to scrape their browsers and saved credentials.
The RAR file appeared on a Telegram channel or a dark web marketplace, listed for a few hundred dollars. The description promises "fresh logs," "high-value banking targets," and "USA/EU traffic." 9k LOGS @Redlogsx1.rar
Disclaimer: This is a scenario based on common cybersecurity threat intelligence regarding stolen data logs. An threat actor known as "Redlogs" distributed a