Amatera Stealer

Lazarus Group's "Fake Font" campaign abuses VS Code tasks to deploy InvisibleFerret via fake coding interviews. Stanley MaaS guarantees Chrome Web Store approval for phishing extensions. Amatera Stealer spreads via fake CAPTCHA and App-V LOLBIN abuse.