https://www.mcafee.com/blogs/other-blogs/mcafee-labs/taking-a-close-look-at-data-stealing-nionspy-file-infector/
Taking a Close Look at Data-Stealing NionSpy File Infector | McAfee Blog
Jun 6, 2025 - NionSpy prefixes its malicious binary onto executable files--unlike other data-stealing Trojans, which store all their functions in a single file.
close look