Hackers Use Fake Chocolatey and Microsoft Activation Websites to Spread New Armorsteal Malware

Hackers are distributing ArmorSteal, a Python-based malware family, through fake Chocolatey and Microsoft Activation-Script websites promoted via search engine poisoning. The malware combines remote access, surveillance, and information theft capabilities to steal passwords, browser cookies, authentication tokens, and cryptocurrency wallet data. Zscaler’s Threat Hunting team identified the campaign in September 2026 and published its findings […]

Read the original article:

Hackers Use Fake Chocolatey and Microsoft Activation Websites to Spread New Armorsteal Malware