🕵️ Amatera stealer

The items that name it 2

• We've got one word for it, and it's usually the wrong one
  article2026-09-10

  Malware/stealer delivered via the WebDAV infection chain by UAT-10820; often resides entirely in memory.

• ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
  writeup2026-09-08It is written here as Amatera stealer (also known as ACR stealer).

  also known as ACR stealer