MAAS VIP_Keylogger Campaign

A sophisticated keylogger campaign has been discovered, utilizing spear-phishing emails with attachments containing hidden malware. The campaign targets multiple countries, employing various packaging styles and execution methods. The malware, known as VIP_Keylogger, is delivered using steganography and process hollowing techniques. It focuses on stealing sensitive information from browsers, email clients, and other applications. The keylogger captures browser data, decrypts passwords, and exfiltrates information through multiple channels, including email. While some features appear disabled, the malware demonstrates advanced capabilities in data theft and evasion techniques.

• China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoorMalware2026-09-30
• Konni Hackers Target Ukraine With Malicious LNK Files and VelvetCake PowerShell MalwareMalware2026-09-24
• July 2026 Threat Trend Report on APT Attacks (South Korea)Campaign2026-08-28
• Update on Attacks by Threat Group APT-C-60 in 2026Malware2026-07-13
• Operation Capsule Vault: RokRAT Attack Chain Analysis Using EMBED_PAYLOAD_v2Malware2026-07-12