Vietnamese Hackers Use PXA Stealer, Hit 4,000 IPs and Steal 200,000 Passwords Globally

Vietnamese hackers are using a Python-based information stealer called PXA Stealer to target over 4,000 IP addresses across 62 countries. The stolen data, including passwords, credit card records, and browser cookies, is being sold on underground platforms like Sherlock, fueling a cybercriminal ecosystem. The campaigns have evolved to employ DLL side-loading techniques and elaborate staging layers to evade detection.