New 'Storm' Infostealer Remotely Decrypts Stolen Credentials (infosecurity-magazine.com)

• Storm uses server-side decryption for stolen credentials.
• The malware bypasses local security controls.
• Affects multiple systems and applications.

"The new 'Storm' infostealer uses server-side decryption of stolen credentials to bypass security controls. The malware collects login data and sends it to a remote server for decryption, evading detection."