New Laplas Clipper Distributed via SmokeLoader
ID: 5eaf4b67-97ba-5a52-88bf-a9f0e60c796a
STIX ID: report--5eaf4b67-97ba-5a52-88bf-a9f0e60c796a
Feed Name: Cyble Blog
Threat Score
Cyble Research and Intelligence Labs documents an active malware campaign in which SmokeLoader distributes multiple payloads including SystemBC (proxy/RAT), RecordBreaker/Raccoon Stealer (infostealer), and a new Laplas Clipper that hijacks cryptocurrency transactions by replacing clipboard wallet addresses; the report contains static/dynamic analysis, C2 URLs, IOCs and mitigation recommendations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.