Research reports
1,224 reports from 387 publishers45 added in the past week
55 reports, newest added first
Added Thu 23 Apr
Lumma Infostealer – Down but Not Out?
The takedown achieved a significant disruption to Lumma infostealers’ infrastructure, but likely didn’t permanently affect most of its Russia-hosted infrastructure. Lumma’s developers are undertaking significant efforts to reinstate the activity and to…
InfostealersTakedowns and arrests
Added Fri 10 Apr
Aurora Stealer
The icon of the executable gives us a hit about how this is spreading. It has Photoshop icon, most probably it was spreading using Malvertising. First we want to know some basic information about the file so I will use DiE to do so. It was identified as GO…
Infostealers
Typhon Reborn V2: Updated stealer features enhanced anti-analysis and evasion capabilities
The developer of the Typhon Reborn information stealer released version 2 (V2) in January, which included significant updates to its codebase and improved capabilities. Most notably, the new version features additional anti-analysis and anti-virtual machine…
Infostealers
Added Tue 7 Apr
U.S. Joins International Action Against RedLine and META Infostealers
AUSTIN, Texas – The Department of Justice joined the Netherlands, Belgium, Eurojust and other partners in announcing an international disruption effort against the current version of RedLine Infostealer, one of the most prevalent infostealers in the world…
InfostealersTakedowns and arrests
Added Thu 2 Apr
Threat Group Cards: A Threat Actor Encyclopedia
Home > List all groups > List all tools > List all groups using tool Janeleiro Tool: Janeleiro Names Janeleiro Category Malware Type Banking trojan, Backdoor, Keylogger, Info stealer, Credential stealer Description (ESET) This new threat, which we’ve named…
MalwareInfostealers
Added Sat 13 Dec 2025
Added Tue 9 Dec 2025
Dissecting-a-new-malspam-chain-delivering-Purelogs-infostealer.pdf
Osservatorio sulla Cybersecurity diretto da Pierluigi Paganini Rapporto a cura del Laboratorio di Analisi Malware diretto da Luigi Martire 2 Sommario Introduction…
Infostealers
Added Sat 22 Nov 2025
SQ_White Paper_Wrap
Warp is a potent malware written in the GO programming language, designed to load payloads and ex-filtrate sensitive information via Telegram. As new variants emerge daily in the current threat landscape to steal sensitive information from infected systems,…
MalwareInfostealers
Added Fri 24 Oct 2025
logpoint-etpr-a-comprehensive-overview-on-stealer-malware-families-1.pdf?hsLang=en
Over the years, the Logpoint Security Research Team has dedicated efforts on researching emerging threats in the Cybersecurity landscape. As we move into 2024, one trend continues to remains as a significant threat: Stealer Malware also known as Info…
MalwareInfostealers
Added Wed 10 Sep 2025
Vidar Infostealer in Action
Vidar Infostealer in Action From API Hooking to Covert Data Exfiltration Bikash Dash and Varadharajan Krishnasamy www.aryaka.com Vidar Infostealer in Action: From API Hooking to Covert Data Exfiltration - Report 2 Table of Contents 03 03 03 04 04 06 06 06 07…
Infostealers
Added Thu 26 Jun 2025
logpoint-etpr-a-comprehensive-overview-on-stealer-malware-families.pdf
Over the years, the Logpoint Security Research Team has dedicated efforts on researching emerging threats in the Cybersecurity landscape. As we move into 2024, one trend continues to remains as a significant threat: Stealer Malware also known as Info…
MalwareInfostealers
Added Wed 25 Jun 2025
Cyber Threat Intelligence Report 2025.pdf
12025 Cyber Threat Intelligence Report 2025 Cyber Threat Intelligence Report Bridewell Threat Intelligence 22025 Cyber Threat Intelligence Report Contents 2025 Cyber Threat Intelligence Report Foreword 2 Executive Summary 4 Malicious Infrastructure 4…
Infostealers
Added Sat 22 Mar 2025
2025ThreatDetectionReport_RedCanary.pdf
Featured technique: Cloud Service Hijacking 64 Featured threat: Scarlet Goldfinch 40 Featured threat: Amber Albatross 42 Featured threat: Lumma
Infostealers
Added Tue 10 Dec 2024
CrackedCantil-a-malware-symphony-delivered-by-cracked-software-performed-by-loaders-infostealers-ransomware-et-al.pdf
The digital landscape teems with diverse malware families, each engineered with distinct capabilities – ranging from data theft, deployment of additional malicious payloads, to destruction of data and more. Yet, beneath their varied functionalities, these…
RansomwareMalwareInfostealers
Added Sat 28 Sep 2024
Rhadamanthys Stealer Adds
Detections and preventative measures unveiled for Rhadamanthys Stealer v0.7.0 provide an effective defense against this evolving threat, offering organizations strategies to prevent data theft and strengthen security. Rhadamanthys Stealer v0.7.0 is a global…
MalwareInfostealers
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.