
Phantom Stealer .NET harvests browser credentials, cookies, cards, sessions, as stealer-as-a-service

TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ and Vect ransomware gangs