Mirrors/cert-orangecyberdefense-cti
1
0
Fork 0
mirror of https://github.com/cert-orangecyberdefense/cti synced 2026-08-07 03:03:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update and rename 20260605_Runster_malwarecampaigns.md to readme.md

Browse Source
This commit is contained in:
CERT Orange Cyberdefense
2026-06-19 11:14:28 +02:00
committed by GitHub
parent e6d6547a5b
commit eeee9d63a0
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
runster/20260605_Runster_malwarecampaigns.md → runster/readme.md
+1 -1
View File
@@ -8,7 +8,7 @@
--- ---
Orange Cyberdefense has been tracking a previously unnamed modular stealer-loader framework we call **Runster**, active since at least November 2025. Two main delivery methods. Two PowerShell modules stealing data. A third, related executable with a DGA component dropping a full-featured DLL. Orange Cyberdefense CERT has been tracking a previously unnamed modular stealer-loader framework we call **Runster**, active since at least November 2025. Two main delivery methods. Two PowerShell modules stealing data. A third, related executable with a DGA component dropping a full-featured DLL.
![RUNSTER attack chain](runster_attack_chain.png) ![RUNSTER attack chain](runster_attack_chain.png)
*RUNSTER delivery and modular architecture — Orange Cyberdefense* *RUNSTER delivery and modular architecture — Orange Cyberdefense*