HawkEye KeyloggerMalware
- HawkEye
- hawkeye reborn
- predator pain
HawKeye is a keylogger that is distributed since 2013. Discovered by IBM X-Force, it is currently spread over phishing campaigns targeting businesses on a worldwide scale. It is designed to steal credentials from numerous applications but, in the last observed versions, new "loader capabilities" have been spotted. It is sold by its development team on dark web markets and hacking forums.From MISP Galaxy
Last reported 16 months ago, by Huntress1 report
ATT&CK techniques
3 techniques · each with the sentence it comes from- T1036.012Browser Fingerprint
“…zed in 2023) was invitation-only, and it included an interface that allowed cybercriminals to browse stolen data by location, IP, browser fingerprint, or otherwise.”
- T1218.002Control Panel
“…ration targeting Lumma Stealer, which disrupted its technical infrastructure with federal authorities seizing its infrastructure and control panel.”
- T1657Financial Theft
“…ms’ email and browser credentials and credit card data, modern infostealers target a broad set of information aimed at identity and financial theft, and they can enable further data harvesting.”
What the reports say
1 report, newest first · the exact sentence from each-
Infostealers Crash Course: A Tradecraft Tuesday Recap“In 2011, the source code of Zeus leaked, leading to the rapid expansion of infostealers like AZORult and HawkEye across the threat landscape (as we’ll see later in this blog, source code leaks and subsequent infostealer variants that pop up Hyra-style represent a repeating trend)…”
Thanks — we review every report.