PonyMalware
- fareit
- siplog
According to KnowBe4, Pony Stealer is a password stealer that can decrypt or unlock passwords for over 110 different applications including VPN, FTP, email, instant messaging, web browsers and much more. Pony Stealer is very dangerous and once it infects a PC it will turn the device into a botnet, allowing it to use the PCs it infects to infect other PCs.From MISP Galaxy
Last reported 5 years ago, by Group-IB1 report
ATT&CK techniques
1 technique · each with the sentence it comes from- T1021.001Remote Desktop Protocol
“Besides Cobalt Strike’s capabilities to run the Beacon stagers on remote hosts, the attackers used Remote Desktop Protocol to move laterally.”
What the reports say
1 report, newest first · the exact sentence from each-
Connecting the Bots“It is known since at least 2016 for dropping Pony and Vawtrak.”
Thanks — we review every report.