Rhadamanthys 0.9.2: A Stealer That Keeps Evolving

Rhadamanthys 0.9.2 released: New version of the popular information stealer introduces changes that break existing tools and add fresh evasion techniques. Professionalization continues: Operators have rebranded as RHAD Security / Mythical Origin Labs and launched a polished website with multiple products on offer. Key technical shifts: New PNG-based payload delivery, updated encryption, smarter sandbox checks, configurable process injections, and added targeting of Ledger Live crypto wallets. Why it matters: Older detection methods may miss this variant, making it a persistent and growing threat to enterprises and individuals. Defender impact: CPR provides updated signatures, research insights, and open-source tools so defenders […]

The post Rhadamanthys 0.9.2: A Stealer That Keeps Evolving appeared first on Check Point Blog.