#Rapuncel
Stiehlt Daten, Passwörter und Wallets: Malware „Rapuncel“ ist als bekannte Software getarnt

www.chip.de/news/cyber-s...
Stiehlt Daten, Passwörter und Wallets: Malware „Rapuncel“ ist als bekannte Software getarnt
Eine neue Cyber-Angriffswelle tarnt sich als bekannte Software auf GitHub. Die Angreifer nutzen ein raffiniertes Tool, um gängige Sicherheitsanwendungen komplett auszuschalten.
www.chip.de
September 24, 2026 at 10:49 PM
Rapuncel Infostealer
Rapuncel Infostealer
www.broadcom.com
September 24, 2026 at 2:35 PM
Rapuncel Infostealer Killed 145 Security Tools Before Stealing Browser and Wallet Credentials www.techtimes.com/articles/327...
Rapuncel Infostealer Killed 145 Security Tools Before Stealing Browser and Wallet Credentials
Rapuncel infostealer campaign stole browser passwords and crypto wallet data from Windows users after a Microsoft-signed kernel driver killed 145 antivirus and EDR tools -- the same driver that scored...
www.techtimes.com
September 20, 2026 at 11:05 AM
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer

www.securityweek.com/fake-lastpas...

#Sotateknologia #Puolustus #Tilannekuva
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer
Attackers impersonate LastPass and other brands to drop a kernel driver, disable security tools, and deploy the Rapuncel stealer.
www.securityweek.com
September 21, 2026 at 4:47 PM
Attackers impersonated at least 40 companies and disabled 145 security products to deploy an infostealer malware. The malicious installers were disguised as LastPass software.

Source: SecurityWeek
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer
Attackers impersonate LastPass and other brands to drop a kernel driver, disable security tools, and deploy the Rapuncel stealer.
www.securityweek.com
September 21, 2026 at 5:28 PM
 An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel.
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
 An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel.
www.bleepingcomputer.com
September 18, 2026 at 3:19 PM
A fake LastPass Authenticator on GitHub enabled an impersonation campaign delivering Rapuncel malware and a kernel driver targeting security tools.
Save What Matters
Curate Feeds | Make Collections | Customize Email Briefs
briefly.co
September 21, 2026 at 4:05 PM
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel. [...]
#hackernews #news
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel. [...]
www.bleepingcomputer.com
September 19, 2026 at 9:42 PM
New Rapuncel Infostealer Abuses Microsoft-Signed Driver to Disable 145 Security Tools https://gbhackers.com/new-rapuncel-infostealer-abuses-microsoft-signed-driver/
September 22, 2026 at 8:10 AM
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer - SecurityWeek https://www.securityweek.com/fake-lastpass-installers-push-kernel-level-edr-killer-rapuncel-stealer/
September 22, 2026 at 7:59 AM
Fake GitHub repos are delivering Rapuncel through trusted-looking downloads. It impersonates 40+ companies and can kill security tools. Verify publishers first: https://www.hexon.bot/blog/rapuncel-infostealer-fake-github-repositories #Cybersecurity #Infosec
September 18, 2026 at 5:30 PM
New 'Rapuncel' infostealer uses fake GitHub repos and a Microsoft-signed kernel driver to disable 145 EDR & AV products. It then steals browser credentials, crypto wallets, and session data. #Rapuncel #Infostealer #Malware #EDR #GitHub

🌐 cyber[.]netsecops[.]io
'Rapuncel' Infostealer Uses Signed Driver to Disable EDR Products
A new malware campaign distributes the
cyber.netsecops.io
September 22, 2026 at 6:00 PM
🚨 Fake #LastPass installer disables defenses

#GitHub lures deliver #Rapuncel, whose signed driver kills 145 AV and EDR processes before stealing credentials.

🔗 read more: thehackernews.com/20...

#ransomNews #cyberthreats #Malware
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
A fake LastPass Authenticator installer uses a signed kernel driver to kill security tools before a stealer collects passwords and wallet files.
thehackernews.com
September 22, 2026 at 1:37 PM
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer www.securityweek.com/fake-lastpas...
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer
The attackers impersonate at least 40 companies and disable 145 security products to deploy infostealer malware.
www.securityweek.com
September 23, 2026 at 1:12 AM
Attackers are spoofing LastPass on GitHub to deliver a new infostealer called Rapuncel. Another reminder that verifying repository…

https://www.bleepingcomputer.com/news/security/fake-lastpass-authenticator-github-repos-push-new-rapuncel-infostealer/

#cybersecurity #infosec
September 22, 2026 at 7:00 AM
Signed driver used to kill 145 security tools & steal passwords with Rapuncel malware. #SecurityNews #Malware #Rapuncel #DriverAttack #CredentialStealer #Cybersecurity thedailytechfeed.com/microsoft-si...
September 21, 2026 at 1:57 PM
偽LastPassインストーラーがEDR無効化・情報窃取マルウェア「Rapuncel」を配布。40社を偽装し145種のセキュリティ製品を無効化。
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer
Attackers impersonate LastPass and other brands to drop a kernel driver, disable security tools, and deploy the Rapuncel stealer.
www.securityweek.com
September 21, 2026 at 8:02 PM