logo

Overview of the Russian-speaking infostealer ecosystem: The distribution

ID: ff00858e-d733-50aa-8751-678d685df5b2

STIX ID: report--ff00858e-d733-50aa-8751-678d685df5b2

Feed Name: Sekoia.com

Threat Score
70/100

Date Published: 2023-04-11

Date Updated: 2026-07-20

...
...

Sekoia analysts report on the Russian-speaking infostealer ecosystem, detailing active distribution techniques — including malvertising/abuse of Google Ads (using warmed or stolen accounts), SEO poisoning, malicious landing pages, and traffic distribution systems — plus underground services selling accounts and templates; the post cites observed loaders and stealer families (e.g., Vidar, RedLine, Raccoon, Aurora, Stealc) and offers monitoring and mitigation guidance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.