Fake Certificate Loader Hides BlankGrabber Malware Chain

BlankGrabber’s operators are now abusing a fake “certificate” loader to hide a multi‑stage Rust and Python infection chain, making this commodity stealer significantly harder to spot on Windows endpoints. The new technique relies on built‑in tools such as certutil.exe, heavily obfuscated PyInstaller stubs, and stealthy exfiltration via Telegram and public web services to evade both […]

The post Fake Certificate Loader Hides BlankGrabber Malware Chain appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.