Inside the REMUS Infostealer: Session Theft, MaaS, and Rapid Evolution
Source: BleepingComputer · Category: Threat Actor & Campaign
REMUS infostealer now prioritizes browser session and authentication token theft over passwords, marking a shift in credential targeting. This threatens law firm attorneys accessing practice management, document systems, and client portals from infected personal devices.