Malware
Armorsteal
- First Reported
- Oct 22, 2026
- Latest Reported
- Oct 22, 2026
Reported Context (1)
- and the Microsoft Activation Scripts (MAS) tool to distribute a Python-based malware family we track as Armorsteal. The fake websites targeted users searching for Chocolatey or MAS software installation commands. Each SEO Poisoning Campaign Uses Fake Chocolatey and MAS Sites to Deliver Armorsteal
MITRE ATT&CK (15)
Products (4)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.