Life on a crooked RedLine: Analyzing the infamous infostealer’s backend
ID: 971635a8-5029-5023-86b0-8cab8ae2bdf0
STIX ID: report--971635a8-5029-5023-86b0-8cab8ae2bdf0
Feed Name: WeLiveSecurity (ESET Research)
Threat Score
**ESET analysis of RedLine Stealer:** This report details an in-depth technical analysis of the RedLine Stealer infostealer-as-a-service, documenting its C#/.NET-based panel and backend (WCF and later REST), affiliate licensing and build process, operational weaknesses (cleartext passwords, weak code-signing practices), widespread network infrastructure (1,000+ panel IPs), links to META Stealer, and provided IoCs and samples used to support law-enforcement takedowns.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.