Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Phishing, Cracked Software and Discord Links Spread Phantom Stealer Across Multiple Countries
Excerpt
Phantom Stealer, a .NET-based information-stealing malware, is being distributed through phishing emails, pirated software downloads, and malicious links shared on Discord and Telegram. The malware is designed to silently collect browser credentials, saved passwords, cookies, cryptocurrency wallet data, system details, and other sensitive information from infected Windows devices. Security researchers have observed Phantom Stealer in campaigns targeting victims across several…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | b588caa5365451a6c60fd73fec5b73f13ac41bcc2a3a3bed7244df5917a62f32 | Medium | Score 53/100 | First seen |
| SHA256 | 382233c398cbc35dcee845ee17046815f37588a382a8106bfb9b0252ea803961 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…