AmonSul Threat Advisories https://amonsul.tech/en/advisories/ Threat advisories with free STIX 2.1 indicator bundles from AmonSul Threat Intelligence. en Wed, 28 Oct 2026 00:00:00 GMT welcome@amonsul.tech (AmonSul) welcome@amonsul.tech (AmonSul) 1440 Hermes Malware-as-a-Service: PyMapper supply-chain delivery https://amonsul.tech/en/advisories/hermes-pymapper-2026-10/ https://amonsul.tech/en/advisories/hermes-pymapper-2026-10/ A commercial Windows credential-stealer and remote-access platform sold on Russian-language forums — “Hermes” — is being delivered through trojanized Python packages on GitHub disguised as scrapers, security tools and crypto utilities. Two delivery chains converge on the same downloader, LOLD. AmonSul Threat Intelligence extracted and normalized the indicators into a free STIX 2.1 bundle you can load into your stack today. Wed, 28 Oct 2026 00:00:00 GMT Threat Advisory Severity: High TLP:CLEAR A commercial Windows credential-stealer and remote-access platform sold on Russian-language forums — “Hermes” — is being delivered through trojanized Python packages on GitHub disguised as scrapers, security tools and crypto utilities. Two delivery chains converge on the same downloader, LOLD. AmonSul Threat Intelligence extracted and normalized the indicators into a free STIX 2.1 bundle you can load into your stack today.

Read the advisory — free STIX 2.1 bundle, 165 indicators.

]]>