FAKE BITWARDEN SITES PUSH NEW PASSWORD STEALER

Summary from the TLDR InfoSec newsletter

Fake websites have been popping up that offer a Trojan masquerading as the Bitwarden password manager that includes a new password-stealing malware dubbed ZenRAT. The malware specifically targets Windows devices and directs macOS or Linux users to the official download page. The malware uses WMI queries to acquire system information in addition to the credentials and sends them in a zip to a C2.