Analyzing a Facebook Profile Stealer Written in Node.js

We analyze an information stealer written in Node.js, packaged into an executable, exfiltrated stolen data via both Telegram bot API and a C&C server, and employed GraphQL as a channel for C&C communication.

amp api bot channel communication data exfiltrated facebook graphql information information stealer node node.js profile reports server stealer stolen telegram telegram bot trend micro research : articles trend micro research : endpoints trend micro research : malware trend micro research : phishing trend micro research : research written