Reads user/profile data of web browsers

Infostealers often target stored browser data, which can include saved credentials etc.

Accesses cryptocurrency files/wallets, possible credential harvesting

Indicator Removal: File Deletion

Adversaries may delete files left behind by the actions of their intrusion activity.

Detect suspicious telegram bot

Detect suspicious telegram bot.