CERT24Remus Stealer enables attackers to bypass MFA protectionLoading data…
CERT24Threat Observatory
Period

Remus Stealer enables attackers to bypass MFA protection

According to Flare’s analysis, REMUS is a new infostealer whose development has focused on stealing browser credentials, cookies, tokens, and authenticated sessions. The source states that stolen authenticated sessions may bypass MFA checks. REMUS capabilities were also expanded to collect browser data associated with password managers.

← Back to intelligence

Remus Stealer enables attackers to bypass MFA protection

According to Flare’s analysis, REMUS is a new infostealer whose development has focused on stealing browser credentials, cookies, tokens, and authenticated sessions. The source states that stolen authenticated sessions may bypass MFA checks. REMUS capabilities were also expanded to collect browser data associated with password managers.