SOLYXIMMORTAL: PYTHON MALWARE ANALYSIS

Summary from the TLDR InfoSec newsletter

SolyxImmortal is a Python-based spyware that targets Windows systems, focused on long-term surveillance and data theft rather than destruction. It steals browser credentials, harvests documents, logs keystrokes, and captures screenshots, then exfiltrates everything via hardcoded Discord webhooks over HTTPS to blend into normal traffic. It minimizes detection while continuously monitoring victims by persisting through AppData and Run keys, abusing DPAPI to decrypt Chromium credentials, and batching keystrokes and archives.