Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
2 IOCs

Phishing, Cracked Software and Discord Links Spread Phantom Stealer Across Multiple Countries

Cyber Press
Cyber Press
Published August 13, 2026Original Report

Excerpt

Phantom Stealer, a .NET-based information-stealing malware, is being distributed through phishing emails, pirated software downloads, and malicious links shared on Discord and Telegram. The malware is designed to silently collect browser credentials, saved passwords, cookies, cryptocurrency wallet data, system details, and other sensitive information from infected Windows devices. Security researchers have observed Phantom Stealer in campaigns targeting victims across several…

Read the original report →

Indicators of Compromise

Open the mindmap →

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA256b588caa5365451a6c60fd73fec5b73f13ac41bcc2a3a3bed7244df5917a62f32MediumScore 53/100First seen
SHA256382233c398cbc35dcee845ee17046815f37588a382a8106bfb9b0252ea803961MediumScore 53/100First seen

IOC Relationship Graph

Building graph…