Attackers adopt JavaScript runtime Bun to spread NWHStealer

In our previous research , we analyzed a Windows infostealer we track as NWHStealer . The attackers behind this stealer are continuously finding new methods to distribute the stealer. During our hunting activities, we noticed how attackers are using a JavaScript runtime called Bun to help distribute it.