Yuta/Glove Stealer Discord C2 Exfiltration via winupdate.exe

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•5

Detects the Yuta/Glove stealer malware (winupdate.exe) communicating with Discord webhooks or API endpoints. This behavior is indicative of data exfiltration or receipt of interactive RAT commands, such as shell, webcam, keylogger, and system tracing.