Date Author Title

MARS STEALER

2022-03-23Brad DuncanArkei Variants: From Vidar to Mars Stealer

MARS

2024-08-19/a>Xavier MertensDo you Like Donuts? Here is a Donut Shellcode Delivered Through PowerShell/Python
2022-03-23/a>Brad DuncanArkei Variants: From Vidar to Mars Stealer
2020-10-14/a>Xavier MertensNicely Obfuscated Python RAT

STEALER

2025-05-06/a>Xavier MertensPython InfoStealer with Embedded Phishing Webserver
2025-04-15/a>Xavier MertensOnline Services Again Abused to Exfiltrate Data
2025-01-29/a>Xavier MertensFrom PowerShell to a Python Obfuscation Race!
2025-01-28/a>Xavier MertensFileless Python InfoStealer Targeting Exodus
2024-11-30/a>Xavier MertensFrom a Regular Infostealer to its Obfuscated Version
2024-11-22/a>Xavier MertensAn Infostealer Searching for « BIP-0039 » Data
2024-11-07/a>Xavier MertensSteam Account Checker Poisoned with Infostealer
2024-10-09/a>Xavier MertensFrom Perfctl to InfoStealer
2024-09-18/a>Xavier MertensPython Infostealer Patching Windows Exodus App
2024-08-27/a>Xavier MertensWhy Is Python so Popular to Infect Windows Hosts?
2024-07-26/a>Xavier MertensExelaStealer Delivered "From Russia With Love"
2024-05-31/a>Xavier Mertens"K1w1" InfoStealer Uses gofile.io for Exfiltration
2024-02-20/a>Xavier MertensPython InfoStealer With Dynamic Sandbox Detection
2024-01-25/a>Xavier MertensFacebook AdsManager Targeted by a Python Infostealer
2023-12-22/a>Xavier MertensShall We Play a Game?
2023-09-29/a>Xavier MertensAre You Still Storing Passwords In Plain Text Files?
2023-05-04/a>Xavier MertensInfostealer Embedded in a Word Document
2023-03-01/a>Xavier MertensPython Infostealer Targeting Gamers
2022-12-18/a>Guy BruneauInfostealer Malware with Double Extension
2022-08-11/a>Xavier MertensInfoStealer Script Based on Curl and NSudo
2022-04-06/a>Brad DuncanWindows MetaStealer Malware
2022-03-23/a>Brad DuncanArkei Variants: From Vidar to Mars Stealer
2022-03-09/a>Xavier MertensInfostealer in a Batch File
2021-12-21/a>Xavier MertensMore Undetected PowerShell Dropper
2021-12-01/a>Xavier MertensInfo-Stealer Using webhook.site to Exfiltrate Data
2021-07-09/a>Brad DuncanHancitor tries XLL as initial malware file
2021-06-30/a>Brad DuncanJune 2021 Forensic Contest: Answers and Analysis
2021-04-06/a>Jan KoprivaMalspam with Lokibot vs. Outlook and RFCs
2021-03-31/a>Xavier MertensQuick Analysis of a Modular InfoStealer
2019-11-27/a>Brad DuncanFinding an Agent Tesla malware sample
2019-10-09/a>Brad DuncanWhat data does Vidar malware steal from an infected host?
2019-01-24/a>Brad DuncanMalspam with Word docs uses macro to run Powershell script and steal system data
2017-03-08/a>Xavier MertensNot All Malware Samples Are Complex