Distribution of Infostealer Made With Electron

AhnLab SEcurity intelligence Center (ASEC) has discovered an Infostealer strain made with Electron.

Electron is a framework that allows one to develop apps using JavaScript, HTML, and CSS. Discord and Microsoft VSCode are major examples of applications made with Electron. Apps made with Electron are packaged and usually distributed in Nullsoft Scriptable Install System (NSIS) installer format. The threat actor in this attack case applied this installer format to the malware. [1]

Case #1

When one runs the malware, the …

ahnlab applications apps asec center css discord distributed distribution electron examples framework html infostealer install intelligence javascript major malware analysis microsoft security security intelligence system vscode