Update 20260605_Runster_malwarecampaigns.md

This commit is contained in:
CERT Orange Cyberdefense
2026-06-17 11:45:47 +02:00
committed by GitHub
parent 38143be2dd
commit c957c01cfc
@@ -1,4 +1,8 @@
Update:
Payload C is probably tied to MetaStealer and was recently detailed by Huntress (which named it Potemkin loader).
Orange Cyberdefense has been tracking a previously unnamed modular stealer+loader framework we call #Runster, active since at least November 2025. Orange Cyberdefense has been tracking a previously unnamed modular stealer+loader framework we call #Runster, active since at least November 2025.