PYTHON-POWERED MALWARE SNAGS HUNDREDS OF CREDIT CARDS, 200K PASSWORDS, AND 4M COOKIES

Summary from the TLDR InfoSec newsletter

Vietnamese cybercriminals using PXA Stealer have infected more than 4,000 victims across 62 countries, stealing 200,000 passwords, credit card data, and 4 million browser cookies. The malware abuses legitimate software like Microsoft Word and PDF readers for sideloading attacks, then sells the stolen data on Telegram marketplaces such as Sherlock.