file_path

/tmp/sync<random>/

discovered 2026-07-22

Stealer staging directory where browser data, wallets, keys, and Keychain are collected before archiving; cleared after upload.

Campaigns

Linked packages

Read the full analysis →