Research reports
1,224 reports from 387 publishers45 added in the past week
48 reports, newest added first
Added Thu 23 Apr
Lumma Infostealer – Down but Not Out?
The takedown achieved a significant disruption to Lumma infostealers’ infrastructure, but likely didn’t permanently affect most of its Russia-hosted infrastructure. Lumma’s developers are undertaking significant efforts to reinstate the activity and to…
InfostealersTakedowns and arrests
Added Fri 10 Apr
Aurora Stealer
The icon of the executable gives us a hit about how this is spreading. It has Photoshop icon, most probably it was spreading using Malvertising. First we want to know some basic information about the file so I will use DiE to do so. It was identified as GO…
Infostealers
Typhon Reborn V2: Updated stealer features enhanced anti-analysis and evasion capabilities
The developer of the Typhon Reborn information stealer released version 2 (V2) in January, which included significant updates to its codebase and improved capabilities. Most notably, the new version features additional anti-analysis and anti-virtual machine…
Infostealers
Added Tue 7 Apr
U.S. Joins International Action Against RedLine and META Infostealers
AUSTIN, Texas – The Department of Justice joined the Netherlands, Belgium, Eurojust and other partners in announcing an international disruption effort against the current version of RedLine Infostealer, one of the most prevalent infostealers in the world…
InfostealersTakedowns and arrests
Added Thu 2 Apr
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Janeleiro Tool: Janeleiro Names Janeleiro Category Malware Type Banking trojan, Backdoor, Keylogger, Info stealer, Credential stealer Description (ESET) This new threat, which we’ve named…
MalwareInfostealers
Added Sat 13 Dec 2025
Added Tue 9 Dec 2025
Dissecting-a-new-malspam-chain-delivering-Purelogs-infostealer.pdf
Osservatorio sulla Cybersecurity diretto da Pierluigi Paganini Rapporto a cura del Laboratorio di Analisi Malware diretto da Luigi Martire 2 Sommario Introduction…
Infostealers
Added Sat 22 Nov 2025
SQ_White Paper_Wrap
Warp is a potent malware written in the GO programming language, designed to load payloads and ex-filtrate sensitive information via Telegram. As new variants emerge daily in the current threat landscape to steal sensitive information from infected systems,…
MalwareInfostealers
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.