Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
Hackers Hide XLoader Malware in Fake Business Orders to Steal Passwords and Evade Detection

A new XLoader malware campaign is landing in inboxes as ordinary business orders and price quote requests. The emails look routine, but the attached archive holds a script that starts a chain of hidden steps. The chain ends with the XLoader password stealer running inside a trusted Windows program. XLoader is an information stealer from […] The post Hackers Hide XLoader Malware in Fake Business Orders to Steal Passwords and Evade Detection appeared first on Cyber Security News.
A new XLoader malware campaign is landing in inboxes as ordinary business orders and price quote requests. The emails look routine, but the attached archive holds a script that starts a chain of hidden steps. The chain ends with the XLoader password stealer running inside a trusted Windows program. XLoader is an information stealer from the FormBook family. It takes saved passwords, browser cookies and other login data, then sends them to servers run by the attackers. Criminals favor it because it is sold as a service, so almost anyone…
Excerpt shown under the publisher's RSS terms · 90 words · full text and figures are on the publisher's site
Related coverage

The expendable extension name: Azure VMAccess naming chaos, password resets, and a detection gap
Sysdig Blog · May 20, 2026

GitHub AI Can Spot Passwords Hidden in Code Before Developers Push Them
Cybersecurity News · Oct 8, 2026

Chick-fil-A Urges Customers to Change Chick-fil-A One Passwords After Unauthorized Access
Cybersecurity News · Jul 23, 2026

Folders, URL matching, and compromised password alerts are now available for Proton Pass
Proton Blog · Oct 15, 2026