A new threat actor dubbed “CoralRaider” targets victims’ financial information, login credentials, and social media profiles—including accounts for businesses and advertisements. The group, which is of Vietnamese origin, has been active since at least 2023 and targets victims in several Asian and Southeast Asian countries.  In the recent campaign, the attackers used XClient stealer and RotBot, a customized version of QuasarRAT, as payloads.

Source: GBHackers