: Extracting login data from Outlook and Thunderbird.
: Stealing saved passwords from web browsers (Chrome, Firefox, Edge).
While specific hashes change constantly, files with the "@OTTOMANCLOUD" tag generally exhibit these behaviors:
: If the file was executed, perform a full offline scan using an updated EDR (Endpoint Detection and Response) or antivirus solution.