Vanguard Stealer is a credential and data-stealing malware family.
Vanguard Stealer is a credential and data-stealing malware family. Recent reports describe a flexible loader named pkr_mtsi that integrates enhanced stealth and can deploy a variety of payloads, including Vanguard Stealer, boosting its evasion and reach in Windows environments.
The pkr_mtsi malware loader has been upgraded to incorporate advanced stealth techniques, including hashed API resolution and improved obfuscation. Initially observed in April 2025, it is utilized for deploying various…