07/21/2026
๐จ New Windows Malware Alert: PureLogs Steals Passwords & Crypto Wallets
โ ๏ธ Cybersecurity researchers at Fortinet have uncovered an active phishing campaign spreading PureLogs, a dangerous Windows malware designed to steal sensitive information.
๐ How the attack works:
๐ง Victims receive a fake purchase order email with a .RAR attachment.
๐ Opening the attachment triggers a hidden script that:
Launches PowerShell
Injects malicious code into MsBuild.exe (a legitimate Windows process)
Downloads the PureLogs malware directly into memory, making it harder to detect.
๐ฏ What PureLogs steals:
๐ Saved passwords from:
Google Chrome
Microsoft Edge
Mozilla Firefox
Brave
๐ฐ Cryptocurrency wallets:
Bitcoin Core
Exodus
๐ฎ Discord tokens
๐ VPN credentials
All stolen data is encrypted and sent to cybercriminals.
๐ก๏ธ Stay Protected:
โ
Never open unexpected email attachments.
โ
Verify purchase orders before downloading files.
โ
Keep Windows and antivirus software up to date.
โ
Enable email security filtering.
โ
Monitor suspicious PowerShell activity.
โ
Use Multi-Factor Authentication (MFA) wherever possible.
๐ Think Before You Click. One fake email could expose all your passwords and digital assets.