The silent “Storm”: New infostealer hijacks sessions, decrypts server-side
Over Security - Cybersecurity news aggregator [Unofficial]
April 13, 2026
New "Storm" infostealer skips local decryption, sending browser data to attacker servers. Varonis shows how server-side decryption enables session hijacking, bypassing passwords and MFA.
Discussion in the ATmosphere