Torg Grabber Malware Campaign Analysis (bleepingcomputer.com)

• ClickFix social engineering as initial vector
• Bypasses Chrome's App-Bound Encryption
• Targets cryptocurrency wallets and password managers

"Torg Grabber uses ClickFix social engineering, PowerShell, and reflective DLL injection to bypass Chrome's App-Bound Encryption. It steals data from cryptocurrency wallets and password managers. The campaign was active in early 2026."