RemusStealer: EtherHiding In Hidden Windows

Reported 02 Oct 2026 by otx · Severity: medium

RemusStealer is a malware-as-a-service program exhibiting multiple similarities to LummaStealer, including anti-virtual machine checks, credential theft tactics, and Application-Bound Encryption bypass methods. A key distinction is RemusStealer's use of Ethereum smart contracts f