Malware
Rapuncel
- First Reported
- Sep 18, 2026
- Latest Reported
- Sep 21, 2026
Reported Context (3)
- and whose driver is interchangeable, and with moderate confidence that the stealer, which LastPass calls Rapuncel, is a relative of BoryptGrab rather than the same build. Fake LastPass Authenticator Installer Uses Signed Driver to Disable Security Tools and Steal Credentials
- driver designed to terminate 145 security tools and open the door to information-stealing malware called Rapuncel. Fake LastPass Apps Deliver Rapuncel Stealer and a Kernel Driver Targeting Security Tools
- A malware campaign is using SEO-optimized GitHub repositories to impersonate LastPass and dozens of other software firms in order to distribute the newly observed Rapuncel information stealer. Fake GitHub Repositories Deliver Rapuncel Infostealer and EDR-Killing Driver
Malware (2)
People (1)
MITRE ATT&CK (13)
Vendors (4)
Products (10)
Tools (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.