BlackGuard stealer extends its capabilities in new variant

AT&T Alien Labs researchers have discovered a new variant of BlackGuard stealer in the wild, infecting using spear phishing attacks. The malware evolved since its previous variant and now arrives with new capabilities.

Key takeaways:

• BlackGuard steals user sensitive information from a wide range of applications and browsers.


• The malware can hijack crypto wallets copied to clipboard.


• The new variant is trying to propagate through removable media and shared devices.

Background

BlackGuard stealer is malware as a service sold in …

alien amp applications attacks browsers capabilities clipboard crypto crypto wallets devices hijack information key labs malware media phishing phishing attacks researchers sensitive information spear phishing stealer takeaways wallets