VIPKeyLogger: A New Infostealer in Phishing Attacks

VIPKeyLogger is a newly identified infostealer malware similar to Snake Keylogger, spreading through phishing emails with malicious Microsoft 365 attachments. It uses RTF files to download a .NET payload, enabling keylogging, data exfiltration, and persistence. The malware evades detection by obfuscation techniques and deletes itself after execution. Stolen data is sent to the attacker’s server via Telegram, posing risks of identity theft and unauthorized access.