RedLine Stealer: Cracked Software to Credential Theft

A claims adjuster at Hartwell Insurance Group downloaded what appeared to be a cracked Adobe Premiere Pro installer from a warez site. The file silently deployed RedLine Stealer, harvested saved passwords from three browsers, and exfiltrated the haul to an attacker C2 over HTTPS -- all within four minutes of execution.