Vector Stealer Targets RDP Files For Exfiltration

Vector Stealer is an information stealer sold on underground forums since 2022. The malicious software is distributed via spear-phishing emails with malicious attachments and can search and exfiltrate a range of sensitive data from the infected device. The malware uses an unknown crypter, KoiVM for virtualization, and specifically targets Remote Desktop files.