Remus Stealer: new MaaS infostealer, $250-$1,000/mo tiers, Lumma-derived code, ships with Google OAuth cookie restoration (regenerates session access even after a password change). Streams stolen logs straight to Telegram. Wrote up what it does and what to actually check if you suspect compromise: [https://www.linkedin.com/pulse/remus-stealer-new-250-a-month-infostealer-renting-out-your-e1goc/?trackingId=1qeb%2Bv0Gd2NBf6e%2B3%2B%2BZig%3D%3D] #infoSec #threatIntel #malware