Stealing information you have copied and pasted.
Saved usernames and passwords from Chrome, Firefox, and Edge. VID-20230123-WA0113mp4
If you have interacted with this file, look for these signs of infection: Stealing information you have copied and pasted
Immediately stop the malware from sending your stolen data to the attacker. VID-20230123-WA0113mp4
New, unrecognized entries in your Windows Startup folder or Registry keys designed to keep the malware running after a reboot. Recommended Actions If you suspect your system is compromised:
Unusual outbound traffic to known command-and-control (C2) servers or unauthorized SMTP (email) servers used to exfiltrate your data.
Periodically taking captures of your desktop activity.