> TritonInfoSec News
Home / Sep 23, 2026 / Story
0
#9 SecurityWeek general September 21, 2026 at 15:46 UTC

Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer

By Ionut Arghire

AI Summary

Attackers distributing fake LastPass installers are deploying a kernel-level EDR killer alongside the 'Rapuncel' infostealer, impersonating at least 40 companies and disabling 145 security products. The campaign uses legitimate-looking software distribution infrastructure to bypass endpoint defenses before dropping credential-harvesting malware. Security teams should review detections for kernel driver abuse and monitor for LastPass-themed social engineering lures.

Read full article → https://www.securityweek.com/fake-lastpass-install…

Relevance score: 80.0/100

# More from September 23

  1. 1
    ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach BleepingComputer
  2. 2
    EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts BleepingComputer
  3. 3
    Check Point warns of Management Server zero-day exploited in attacks BleepingComputer
  4. 4
    WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers The Hacker News
  5. 5
    Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access The Hacker News
  6. 6
    New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory The Hacker News
  7. 7
    New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups The Hacker News
  8. 8
    Google Fined €403 Million Over GDPR Violations Tied to Location Data The Hacker News
  9. 10
    Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme SecurityWeek