New Jupyter Infostealer Version Emerges with Sophisticated Stealth Tactics
![Image](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgu4Y-P7cX8HIcgdpdTKwut3AQNAVqzkBGQYly61_D0KgmQcVfwCIljQh1tHa6q-HaSQIGgbb1fuYlW9OTwv3j_FnCCS539G6oi9VBVf_LVCYE9wwFCWlRjQzpT9vD9KTcIxUasH7LZpP_RpYYJSZJ-b44m_9dBOU3e_iL6LZ-iv9dFy7tUN8NQ9Bz6mQDy/s728-rw-ft-e30/infostealer.jpg)
An updated version of an information stealer malware known as Jupyter has resurfaced with "simple yet impactful changes" that aim to stealthily establish a persistent foothold on compromised systems. "The team has discovered new waves of Jupyter Infostealer attacks which leverage PowerShell command modifications and signatures of private keys in attempts to pass off the malware as a legitimately signed file," VMware Carbon Black researchers said in a report shared with The Hacker News. Jupyter Infostealer, also known as Polazert, SolarMarker, and Yellow Cockatoo, has a track record of leveraging manipulated search engine optimization (SEO) tactics and malvertising as an initial access vector to trick users searching for popular software into downloading it from dubious websites. It comes with capabilities to harvest credentials as well as establish encrypted command-and-control (C2) communication to exfiltrate data and execute arbitrary commands. Th