Vidar 2.0 Infostealer Upgraded with Enhanced Capabilities

Vidar 2.0, an upgraded version of the Vidar infostealer, has been released with enhanced data exfiltration and evasion capabilities. The new version, rewritten in C language, features multithreaded architecture for faster data collection and new techniques to bypass browser security measures. This upgrade coincides with the decline of Lumma Stealer, making Vidar a top contender in the infostealer market. Security teams should anticipate increased Vidar 2.0 activity in the coming months.

Latest mentioned: 10-23

Earliest mentioned: 10-21

Sources

securityonline.info thecyberexpress.com gbhackers.com bleepingcomputer.com infosecurity-magazine.com

Also Read

PhantomRaven Supply-Chain Attack Infects npm Ecosystem

Koi Security has discovered a massive supply-chain attack called PhantomRaven, which has infected the npm ecosystem with 126 malicious packages downloaded over 86,000 times. The campaign, active since August 2025, steals npm authentication tokens, GitHub credentials, and CI/CD secrets by concealing malicious code in dependencies. The attackers used Remote Dynamic Dependencies (RDD) to bypass security scanners, making the packages appear harmless. The malware executed automatically during installation, performing aggressive reconnaissance and exfiltration. Koi Security noted the use of AI-driven slopsquatting to create plausible-sounding package names, tricking developers into trusting malicious packages.

10-31Read more →