Back Thehackernews

SmartLoader Attack Uses Trojanized Oura MCP Server to Deploy StealC Infostealer

Thehackernews •[email protected] (The Hacker News) • February 17, 2026

Join Wiz experts to see how AI and context-aware forensics make cloud investigations faster, clearer, and more reliable.

Quantum computers could soon break today’s encryption—join Zscaler’s webinar to learn how post-quantum cryptography keeps your data safe for the future.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SmartLoader Campaign Uses Fake Oura MCP Server to Distribute StealC Malware Hackers exploited a cloned Oura MCP server to distribute the StealC info-stealer malware. The attack was uncovered by Straiker’s AI Research (STAR) Labs, revealing that the fake project was designed to appear legitimate, complete with counterfeit forks to deceive users into downloading the malware. 2 sources 37

Extracted Entities

SmartLoader Attack Uses Trojanized Oura MCP Server to Deploy StealC Infostealer

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Malware (1)

Tools (1)