New NWHStealer Delivery Chain Uses Bun Loader, Anti-VM Checks, and Encrypted C2

A new and evolving threat has caught the attention of cybersecurity researchers worldwide. A Windows-based information stealer known as NWHStealer has resurfaced with a more sophisticated delivery chain, now using the Bun JavaScript runtime as part of its infection process. This shift makes it clear that the attackers behind this campaign are...

Read the full article at the source.