Ficker StealerMalware
According to CyberArk, this malware is used to steal sensitive information, including login credentials, credit card information, cryptocurrency wallets and browser information from applications such as WinSCP, Discord, Google Chrome, Electrum, etc. It does all that by implementing a different approach than other stealers (we’ll cover it later).From MISP Galaxy
Last reported 5 years ago, by Group-IB1 report
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1505.003Web Shell
“The list is uploaded through importing links to web shells.”
- T1684Social Engineering
“…r of the service claimed that Prometheus TDS is an ANTIBOT redirect system designed to send out emails, work with traffic, and for social engineering.”
What the reports say
1 report, newest first · the exact sentence from each-
Prometheus TDS“The experts also mention the Ficker Stealer, Cobalt Strike, and Send-Safe spambots in their research.”
Thanks — we review every report.