The Gremlin Stealer is reportedly using new tactics, including hiding in plain sight with resource files. It is said to store command and control urls and exfiltration paths in encrypted resource sections. However, it is unclear if this is a new stealer that has been introduced or an evolution of existing tactics, with some reports suggesting it is a new stealer being sold in underground forums.