Pixel-Stealing Malware: Unpacking a Three-Stage .NET Loader With Memory-Only Payload Stages
The "mass" sample arrived as an AES-encrypted ZIP. What it turned out to be: a decoy Romanian engineering app, a fake Chinese security
11 Sep 2026 · 11 min read
read →