SmartLoader Attack Uses Trojanized Oura MCP Server to Deploy StealC Infostealer
- Posted on February 17, 2026
- By The Hacker News
- 1 Views
SmartLoader Attack Uses Trojanized Oura MCP Server to Deploy StealC Infostealer

SmartLoader campaign spreading StealC via a trojanized Oura MCP server using fake GitHub forks to steal credentials and crypto funds.