Raccoon is a malware family that has been sold as malware-as-a-service on underground forums since early 2019. In early July 2022, a new variant of this malware was released. The new variant, popularly known as Raccoon Stealer v2, is written in C unlike previous versions which were mainly written in C++. The Raccoon Malware is a robust stealer that allows stealing of data such as passwords, cookies, and autofill data from browsers. Raccoon stealers also support theft from all cryptocurrency wallets.
REFERENCES: https://www.zscaler.com/blogs/security-research/raccoon-stealer-v2-latest-generation-raccoon-family https://pastebin.com/RD0HRVw3
MALWARE FAMILY: Raccoon
ATT&CK IDS: T1041 - Exfiltration Over C2 Channel, T1134 - Access Token Manipulation, T1140 - Deobfuscate/Decode Files or Information, T1007 - System Service Discovery, T1201 - Password Policy Discovery, T1539 - Steal Web Session Cookie, T1528 - Steal Application Access Token
Read More:
Comentários