Securonix uncovered Veil#Drop, a multi-stage malware delivery framework that uses compromised websites, JavaScript launchers, and PowerShell download cradles hosted on Blogspot to deliver malware. The chain ultimately infects victims with PureLog Stealer, which harvests credentials, cookies, tokens, browser history, and other sensitive data from multiple browsers and applications. #VeilDrop #PureLogStealer #Blogspot...

Malware family PureLog Stealer (delivered by the Veil#Drop framework) Threat actor Not attributed by Securonix Targets Windows users; victim count not disclosed Delivery vector Malicious JavaScript disguised as a document, spread through compromised websites Key capabilities Steals browser credentials, cookies, session tokens, and crypto wallets; profiles the host Source Securonix Threat Research TL;DR Securonix Threat Research named a new fileless campaign Veil#Drop.

Introduction: A New Generation of Invisible Cyber Threats Cybercriminals are no longer relying on noisy ransomware or destructive attacks to make headlines. Instead, they are shifting toward stealth-focused malware designed to remain invisible while silently harvesting valuable corporate information. One of the latest examples of this evolution is VEILDROP, a sophisticated multi-stage malware delivery framework that abuses trusted cloud infrastructure, legitimate Windows components, and memory-only execution techniques to deploy the dangerous PureLog Stealer.

Introduction: A New Generation of Stealth Malware Is Changing the Cybersecurity Battlefield Cybercriminals are constantly evolving, but some attacks stand out because they challenge the very foundations of traditional security defenses. Security researchers have now uncovered an advanced fileless malware framework known as VeilDrop, a sophisticated campaign that abuses Google's Blogspot platform to secretly distribute the PureLog Stealer without leaving traditional files on infected systems.