⤷ Title: Signed & Stolen: “Phantom Stealer” Hijacks Java App via Fake DHL Invoice
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:36:35 +0000
════════════════════════
⌗ Tags: #Malware #AddInProcess32.exe #DHL Phishing #DLL Sideloading #info_stealer #Java security #jdeps.exe #Malware Analysis #Manoj Kshirsagar #Phantom Stealer #Process Hollowing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:36:35 +0000
════════════════════════
⌗ Tags: #Malware #AddInProcess32.exe #DHL Phishing #DLL Sideloading #info_stealer #Java security #jdeps.exe #Malware Analysis #Manoj Kshirsagar #Phantom Stealer #Process Hollowing
Daily CyberSecurity
Signed & Stolen: "Phantom Stealer" Hijacks Java App via Fake DHL Invoice
Attackers use fake DHL invoices to sideload Phantom Stealer v3.5.0 via a signed Java utility. Malware hides in AddInProcess32.exe. Watch out.