While the September 2025 Shai-Hulud attack focused primarily on credential harvesting and self-propagation, this new variant ...

The new ToddyCat tooling shifts the group’s focus from browser theft to extracting Outlook mail archives and Microsoft 365 ...