Login information for FTP clients (e.g., FileZilla), VPNs (e.g., NordVPN, ProtonVPN), and gaming platforms like Steam or Discord.

The malware is rarely labeled "malware." Instead, it is disguised to trick users into manual execution: We installed RedLine InfoStealer (Malware)

Gathers hardware configuration, IP addresses, location data, and lists of installed software. Common Distribution Methods