MicroStealer - Installer, Payload, or Persistence Activity Detected
MicroStealer is a newly emerging infostealer that spreads quickly, evades traditional detection, and focuses on stealing corporate credentials, browser data, session tokens, and cryptocurrency wallets. Its layered delivery chain (NSIS → Electron → Java) and heavy obfuscation make it difficult to detect, while exfiltration occurs via Discord webhooks and attacker‑controlled servers.
Microsoft Sentinel (KQL)
