Back Gbhackers

Copyright Complaint Lures Linked to New PureLog Stealer Credential Theft Wave

Gbhackers •Divya • March 21, 2026

Threat actors are actively distributing the PureLog Stealer through a sophisticated, multi-stage attack campaign disguised as legal copyright violation notices. This information-stealing malware is engineered to silently harvest sensitive data, including browser credentials, browser extensions, cryptocurrency wallets, and detailed system information. The campaign selectively targets organizations within the healthcare, government, hospitality, and education sectors across […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multi-Stage PureLog Stealer Campaign Targets Key Industries via Copyright Lures A sophisticated multi-stage attack campaign is distributing PureLog Stealer, an information-stealing malware, disguised as legal copyright violation notices. The malware targets sensitive data such as browser credentials, extensions, cryptocurrency wallets, and system information. Key sectors affected include healthcare, government, hospitality, and education, particularly in Germany and Canada. The attack method involves phishing emails that lead victims to download a malicious executable. Once executed, the malware employs a multi-stage infection chain, utilizing encrypted, fileless techniques to evade detection. The campaign is characterized by its selective targeting and localized delivery, with filenames in the victim's language. Current reports indicate ongoing activity, emphasizing the need for heightened awareness and vigilance among potential targets. 4 sources 65

Extracted Entities

Copyright Complaint Lures Linked to New PureLog Stealer Credential Theft Wave

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Industries (3)

Malware (1)

MITRE ATT&CK (2)