Amatera Infostealer Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

January 27, 2026

Last Seen

January 27, 2026

Related Threat Clusters

Amatera Infostealer Campaign Uses Fake CAPTCHA and App-V Scripts
A new campaign is distributing the Amatera infostealing malware by employing a fake CAPTCHA method alongside a signed Microsoft Application Virtualization (App-V) script. This attack utilizes legitimate Microsoft…

2 articles · Updated January 27, 2026

Recent Intelligence Reports

Amatera infostealer campaign leverages fake CAPTCHA and App-V scripts — Scworld · January 27, 2026

Related Entities

Malware Amatera Infostealer Campaign ACR Infostealer Steganography T1059.001 - PowerShell T1059.005 - VBScript T1218 - Signed Binary Proxy Execution Windows PowerShell SyncAppvPublishingServer.vbs