Skip to content
Threat Feed
Subscribe

Tag

Hellcat-Ransomware

2 briefs RSS
high threat

AMOS Stealer macOS VM Detection

This brief describes detection of AMOS Stealer checking for virtual machine environments on macOS via osascript and system_profiler, potentially leading to information theft and further malicious activity.

macOS AMOS Stealer amos-stealer hellcat-ransomware vm-detection
2r 2t
high threat

Braodo Stealer Screen Capture in TEMP Directory

This analytic detects the creation of screen capture files in the TEMP directory, specifically targeting activity associated with the Braodo stealer malware, which captures screenshots of the victim's desktop as part of its data theft activities.

Splunk Enterprise +2 Braodo Stealer stealc-stealer crypto-stealer braodo-stealer apt37 hellcat-ransomware vip-keylogger screen-capture malware
2r 1t