Multi-Stage PureLog Stealer Campaign Targets Key Industries via Copyright Lures

A sophisticated multi-stage attack campaign is distributing PureLog Stealer, an information-stealing malware, disguised as legal copyright violation notices. The malware targets sensitive data such as browser credentials, extensions, cryptocurrency wallets, and system information. Key sectors affected include healthcare, government, hospitality, and education, particularly in Germany and Canada. The attack method involves phishing emails that lead victims to download a malicious executable. Once executed, the malware employs a multi-stage infection chain, utilizing encrypted, fileless techniques to evade detection. The campaign is characterized by its selective targeting and localized delivery, with filenames in the victim's language. Current reports indicate ongoing activity, emphasizing the need for heightened awareness and vigilance among potential targets.

Key Points: • PureLog Stealer is delivered through phishing emails disguised as copyright complaints. • The malware targets sensitive data from key sectors, including healthcare and government. • The attack employs a multi-stage infection chain designed to evade detection and increase success.