THREAT OPS › Threat News › New Infostealer Campaign Targets Users via Spoofed Software Installers
New Infostealer Campaign Targets Users via Spoofed Software Installers
<h2>Introduction</h2> <div class="interval_12">As part of our commitment to sharing interesting hunts, we are launching these 'Flash Hunting Findings' to highlight active threats. Our latest investigation tracks an operation active between January 11 and January 15, 2026, which uses consistent ZIP file structures and a unique behash ("4acaac53c8340a8c236c91e68244e6cb") for identification. The camp
MITRE ATT&CK techniques
Indicators of compromise
- 09a8b930c8b79e7c313e5e741e1d59c39ae91bc1f10cdefa68b47bf77519be57sha256
- bb55b097341a5e6ed733c156b07c878c086b08ac40f7cfa31e6715c23dd0b3a7sha256
- 606baa263e87d32a64a9b191fc7e96ca066708b2f003bde35391908d3311a463sha256
- 6773af31bd7891852c3d8170085dd4bf2d68ea24a165e4b604d777bd083caeaasha256
- 4294d6e8f1a63b88c473fce71b665bbc713e3ee88d95f286e058f1a37d4162besha256
- 5591156d120934f19f2bb92d9f9b1b32cb022134befef9b63c2191460be36899sha256
- 42d53bf0ed5880616aa995cad357d27e102fb66b2fca89b17f92709b38706706sha256
- 5aa6f4a57fb86759bbcc9fc6c61b5f74c0ca74604a22084f9e0310840aa73664sha256
- 84021dcfad522a75bf00a07e6b5cb4e17063bd715a877ed01ba5d1631cd3ad71sha256
- ca8467ae9527ed908e9478c3f0891c52c0266577ca59e4c80a029c256c1d4fcesha256
- 9619331ef9ff6b2d40e77a67ec86fc81b050eeb96c4b5f735eb9472c54da6735sha256
- a2842c7cfaadfba90b29e0b9873a592dd5dbea0ef78883d240baf3ee2d5670c5sha256
- 4705fd47bf0617b60baef8401c47d21afb3796666092ce40fbb7fe51782ae280sha256
- 580d37fc9d9cc95dc615d41fa2272f8e86c9b4da2988a336a8b3a3f90f4363c2sha256
- d47fd17d1d82ea61d850ccc2af3bee54adce6975d762fb4dee8f4006692c5ef7sha256
- fd855aa20467708d004d4aab5203dd5ecdf4db2b3cb2ed7e83c27368368f02bbsha256
- a0687834ce9cb8a40b2bb30b18322298aff74147771896787609afad9016f4easha256
- 4235732440506e626fd4d0fffad85700a8fcf3e83ba5c5bc8e19ada508a6498esha256
- cd1fe2762acf3fb0784b17e23e1751ca9e81a6c0518c6be4729e2bc369040ca5sha256
- f798c24a688d7858efd6efeaa8641822ad269feeb3a74962c2f7c523cf8563ffsha256
- 0698a2c6401059a3979d931b84d2d4b011d38566f20558ee7950a8bf475a6959sha256
- 1b3bee041f2fffcb9c216522afa67791d4c658f257705e0feccc7573489ec06fsha256
- 231c05f4db4027c131259d1acf940e87e15261bb8cb443c7521294512154379bsha256
- ec2e30d8e5cacecdf26c713e3ee3a45ebc512059a64ba4062b20ca8bec2eb9e7sha256
- 58bd2e6932270921028ab54e5ff4b0dbd1bf67424d4a5d83883c429cadeef662sha256
- 57ed35e6d2f2d0c9bbc3f17ce2c94946cc857809f4ab5c53d7cb04a4e48c8b14sha256
- cfcf3d248100228905ad1e8c5849bf44757dd490a0b323a10938449946eabeeesha256
- f02be238d14f8e248ad9516a896da7f49933adc7b36db7f52a7e12d1c2ddc6afsha256
- f60802c7bec15da6d84d03aad3457e76c5760e4556db7c2212f08e3301dc0d92sha256
- 02dc9217f870790b96e1069acd381ae58c2335b15af32310f38198b5ee10b158sha256
- f9549e382faf0033b12298b4fd7cd10e86c680fe93f7af99291b75fd3d0c9842sha256
- 92f4d95938789a69e0343b98240109934c0502f73d8b6c04e8ee856f606015c8sha256
- 66fba00b3496d61ca43ec3eae02527eb5222892186c8223b9802060a932a5a7asha256
- e5dd464a2c90a8c965db655906d0dc84a9ac84701a13267d3d0c89a3c97e1e9bsha256
- 35211074b59417dd5a205618fed3402d4ac9ca419374ff2d7349e70a3a462a15sha256
- 6863b4906e0bd4961369b8784b968b443f745869dbe19c6d97e2287837849385sha256
- a83c478f075a3623da5684c52993293d38ecaa17f4a1ddca10f95335865ef1e2sha256
- 43e2936e4a97d9bc43b423841b137fde1dd5b2f291abf20d3ba57b8f198d9fabsha256
- f001ae3318ba29a3b663d72b5375d10da5207163c6b2746cfae9e46a37d975cfsha256
- c67403d3b6e7750222f20fa97daa3c05a9a8cce39db16455e196cd81d087b54dsha256