Obfuscation Without Effort: Breaking a GIFTEDCROOK Stealer

Reported 13 Apr 2026 by otx · Severity: medium

A fresh GIFTEDCROOK stealer variant was identified as part of a UAC-0226 campaign targeting Ukraine. Initial access leverages CVE-2025-6218 and CVE-2025-8088 through a weaponized RAR archive containing a decoy PDF themed around military registry information. The attack chain uses