Threat Advisories

Hermes Malware-as-a-Service: PyMapper supply-chain delivery

A commercial Windows credential-stealer and remote-access platform sold on Russian-language forums — “Hermes” — is being delivered through trojanized Python packages on GitHub disguised as scrapers, security tools and crypto utilities. Two delivery chains converge on the same downloader, LOLD. AmonSul Threat Intelligence extracted and normalized the indicators into a free STIX 2.1 bundle you can load into your stack today.