EternityTeam: A New Prominent Threat Group

This report documents EternityTeam, an emerging financially motivated cybercrime group active on Russian-language underground forums that develops and sells a suite of malware (Eternity Stealer, Worm, Miner, Clipper, Botnet/Dropper and Ransomware). It includes forum-based marketing and pricing, technical analysis of the .NET-based Eternity Stealer (targets browsers, crypto wallets, and apps), evidence of samples in the wild, C2 domains, a long list of SHA-256 IoCs, and a YARA rule for detection.