logo

New RisePro Stealer distributed by the prominent PrivateLoader

ID: 7bfe4bcc-2ead-5367-a25d-c33e78554c18

STIX ID: report--7bfe4bcc-2ead-5367-a25d-c33e78554c18

Feed Name: Sekoia.com

Threat Score
75/100

Date Published: 2022-12-22

Date Updated: 2026-07-20

...
...

**Executive summary:** RisePro is a recently documented information-stealer delivered via PrivateLoader that targets a wide range of browsers, browser extensions, 2FA and crypto wallets to exfiltrate credentials, cookies, credit cards and other sensitive files. The report covers technical details including string and network obfuscation (byte-substitution + XOR), dynamic API resolution, embedded or fetched DLLs, host fingerprinting and screenshot capture, C2 HTTP endpoints and obfuscated communication, IoCs (IPs, domains, sample hashes), and notes that RisePro is marketed/ supported via Telegram and may load further payloads.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.