UnregStealer - Form-Grabber Demasking Fetch
Identifies network traffic requesting 'te_3_la.js', a script used by UnregStealer to strip password masking from DOM elements, facilitating credential theft.
Microsoft Sentinel (KQL)

Identifies network traffic requesting 'te_3_la.js', a script used by UnregStealer to strip password masking from DOM elements, facilitating credential theft.

Already have an account?