ctrlINT What the industry said about every indicator, with the quote

Cthulhu StealerMalware

Last reported 3 months ago, by Group-IB1 report

ATT&CK techniques

6 of 64 · each with the sentence it comes from
  1. T1005Data from Local System

    “T1005”

    Group-IBVendor
  2. T1016System Network Configuration Discovery

    “T1016”

    Group-IBVendor
  3. T1020Automated Exfiltration

    “T1020”

    Group-IBVendor
  4. T1027Obfuscated Files or Information

    “T1027”

    Group-IBVendor
  5. T1027.004Compile After Delivery

    “Obfuscated Files or Information: Compile After Delivery”

    Group-IBVendor
  6. T1027.016Junk Code Insertion

    “T1027.016”

    Group-IBVendor

Reports per month

last 12 months

October so far (hatched). Counted by report, not by story.

What the reports say

1 report, newest first · the exact sentence from each
  1. “…hreat landscape has grown considerably in recent years, with malware like Atomic Stealer (AMOS), Banshee Stealer, Poseidon, Cuckoo, Cthulhu Stealer and MacStealer, the total number of known macOS malware families remains relatively small in contrast to other systems, which means…”

    Group-IBVendor
    ClickLock Stealer: Paste Once, Lose Everything

Thanks — we review every report.

Report a wrong match
What is wrong with Cthulhu Stealer here?
No account needed. We do not store your IP address.