Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
THREAT ADVISORY Venom Info Stealer MaaS April 1, 2026
Threat Actors
Excerpt
DOWNLOAD PDF Threat Level: High (active MaaS with ongoing development and real-time credential theft capability) Target Platform: Windows (primary payload); operators can manage from Windows or macOS Executive Summary Venom Stealer is a newly emerged Malware-as-a-Service (MaaS) infostealer sold via Telegram under the handle “VenomStealer”. It is licensed at $250 per month or $1,800 lifetime (including updates) and includes an affiliate program. Unlike traditional one-shot…
Read the original report →Diamond Model
Adversary(2)
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | ecbeaa13921dbad8028d29534c3878503f45a82a09cf27857fa4335bd1c9286d | Medium | Score 53/100 | First seen |
| Domain | app-metrics-cdn.com | High | Score 58/100 | First seen |
| MD5 | 0a32d6abea15f3bfe2a74763ba6c4ef5 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…