Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation

Reported 07 Jul 2026 by otx · Severity: medium

A financially motivated campaign identified in April 2026 delivers Vidar stealer and XMRig cryptocurrency miner to victims worldwide through malvertising. Attackers distribute password-protected archives impersonating cracked software, using Go-compiled loaders built with the Fac