StealC Outlook and Foxmail Credential Harvesting via Registry Enumeration
Detects unauthorized processes attempting to access Outlook or Windows Messaging Subsystem profile registry keys. This behavior is indicative of infostealer malware, such as StealC, attempting to harvest stored email client credentials.
YARA-L

