Noodlophile Stealer Evolves: Targeted Copyright Phishing Hits Enterprises

This source is an in-depth security blog post from Morphisec, a cybersecurity company, detailing the evolution of the Noodlophile Stealer. It describes how this malware now employs sophisticated spear-phishing attacks disguised as copyright infringement notices, specifically targeting enterprises with a strong social media presence, especially on Facebook. The article explains the malware's delivery mechanisms, which exploit legitimate software vulnerabilities, its intermediate staging processes, and the enhanced obfuscation techniques it uses, including Telegram-based command-and-control. Finally, it outlines the Noodlophile Stealer's current data theft capabilities, focusing on browser-based information, and discusses its potential for future evolution, while also presenting Morphisec's solution to counter such threats.