MaaS Malware Builder Automates Creation of Windows Infostealers With Anti-VM Evasion

A Python-based malware builder can generate customized Windows infostealers that avoid some analysis environments, persist after login, and send stolen data to an attacker-controlled webhook. K7 Labs found the builder inside a nested archive and described its design as consistent with a malware-as-a-service (MaaS) model. The analysis does not establish how widely the tool has been distributed or used. Researchers began with a RAR file named my new program called 2.rar .…