New RisePro Stealer distributed by the prominent PrivateLoader
ID: 7bfe4bcc-2ead-5367-a25d-c33e78554c18
STIX ID: report--7bfe4bcc-2ead-5367-a25d-c33e78554c18
Feed Name: Sekoia.com
**Executive summary:** RisePro is a recently documented information-stealer delivered via PrivateLoader that targets a wide range of browsers, browser extensions, 2FA and crypto wallets to exfiltrate credentials, cookies, credit cards and other sensitive files. The report covers technical details including string and network obfuscation (byte-substitution + XOR), dynamic API resolution, embedded or fetched DLLs, host fingerprinting and screenshot capture, C2 HTTP endpoints and obfuscated communication, IoCs (IPs, domains, sample hashes), and notes that RisePro is marketed/ supported via Telegram and may load further payloads.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
