CYFIRMA Research

Author: CYFIRMA

Cyber defenders, listen up! The CYFIRMA Research podcast has some juicy intel on the latest cyber threats that are lurking in the shadows. Tune in to this security briefing to stay on top of emerging threats and be ready to tackle digital risk like never before.
Be a guest on this podcast

Language: en-us

Genres: News, Tech News

Contact email: Get it

Feed URL: Get it

iTunes ID: Get it

Get all podcast data

Listen Now...

CYFIRMA Research- LTX Stealer: Analysis of a Node.js–Based Credential Stealer
Thursday, 12 March, 2026

Malware Spotlight: LTX Stealer CYFIRMA researchers uncovered a sophisticated Windows info-stealer hidden in a legit Inno Setup installer.Key takeaways: 🔹 Node.js stealer with Bytenode bytecode obfuscation 🔹 Targets Chromium browsers & crypto wallets 🔹 Persists in hidden/system folders under Program Files(x86) 🔹 Uses Supabase for operator auth + Cloudflare to mask backend 🔹 Commercial-grade Malware-as-a-Service (MaaS)Modern attackers are using trusted installers + runtime decryption to evade detection. Stay vigilant! Link to the Research Report: LTX Stealer : Analysis of a Node.js–Based Credential Stealer - CYFIRMA#CyberSecurity #MalwareAnalysis #Infostealer #NodeJS #ThreatIntel #MaaS #CYFIRMA #CYFIRMAresearch #ExternalThreatLandscapeManagement #ETLMhttps://www.cyfirma.com/