Cisco TalosPublished
Typhon Reborn V2: Updated stealer features enhanced anti-analysis and evasion capabilities
By Edmund Brumaghin
Excerpt
The developer of the Typhon Reborn information stealer released version 2 (V2) in January, which included significant updates to its codebase and improved capabilities.
Most notably, the new version features additional anti-analysis and anti-virtual machine (VM) capabilities to evade detection and make analysis more difficult.
We assess Typhon Reborn 2 will likely appear in future attacks, as we have already observed samples in the wild and multiple purchases of the malware.
The stealer is currently offered on underground forums for $59 per month but also offers a lifetime subscription for $540, which is inexpensi…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Cisco Talos on blog.talosintelligence.com.
More from Cisco Talos7
- The Closed Quorum: Inside the first reported autonomous AI C2 implantCisco Talos · Published 22 Sep
- UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaignCisco Talos · Published 16 Jul
- UAT-7810 continues building ORB networks using new malwareCisco Talos · Published 7 Jul
- New Dohdoor malware campaign targets education and health careCisco Talos · Published 26 Feb
On the same topics
- Vidar v1.5 in Go: same family, new language, heavy sandbox checksderp.ca · Published 16 May
- StealC Is Back, and This Time It's a RATVaronis · Published 22 Oct
- Threat Group Cards: A Threat Actor EncyclopediaETDA Threat Group Cards · Added 25 Oct
- GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub RepositoriesThe Hacker News · Published 19 Oct
