Researchers noticed a new version of CopperStealer malware infecting systems via websites hosting fake software. They examined this new version that was reusing parts of the code related to a previous campaign. Similarities with earlier versions The following similarities from earlier versions were observed: - The same cryptor - Use of Data Encryption Standard (DES) with the same key - The same name of the DLL export function (for later versions of CopperStealer) - Data exfiltration to a Telegram channel (for later versions of CopperStealer) - Use of the executable utility MiniThunderPlatform