A new version of the CryptBot info stealer was seen in distribution via multiple websites that offer free downloads of cracks for games and pro-grade software. The latest version features new capabilities and optimization, while the malware authors have also deleted several older functions to make their tool leaner and more efficient. The threat actors use both custom domains or websites hosted on Amazon AWS to distribute malware through websites pretending to offer software cracks, key generators, or other utilities. The new variant only features a single info-stealing C2 folder.”]