Researchers at Cyphort Labs have discovered a campaign that is actively targeting usernames and passwords, and has done so undetected since 2009. The campaign, which researchers are calling Nighthunter, targets credentials seemingly without focus. In each attack, the malware delivered targets Google, Yahoo, Facebook, Dropbox, and Skype credentials. Some of the malware samples in this campaign targeted security process and attempted to shut them down if detected. The potential for analyzing and correlating the stolen data to mount highly targeted, damaging attacks is high.”]

