Cybercrime, ClipBanker and PhoenixMiner conveyed via fake saved photos The exe file is redline stealer. This, once opened, automatically downloads the other two malware:… Cybercrime, ClipBanker and PhoenixMiner conveyed via fake saved photos 3 January 2022 Francesco Bussoletti Defence and Security, Restricted Area The exe file is redline stealer. This, once opened, automatically downloads the other two malware: a banking trojan and a cryptominer.