New Version Of KPOT Malware Released
ID: 678931e3-4c4c-5e74-8d05-6bc8c85a41b2
STIX ID: report--678931e3-4c4c-5e74-8d05-6bc8c85a41b2
Feed Name: Cyble Blog
Threat Score
Cyble reports the release of a new version of the KPOT (KITPOT) stealer, detailing fixes and added features that expand its credential- and data-exfiltration capabilities — including improved collection from Chromium-based Edge, Chromium 80+, Firefox, Skype, mRemoteNG, Ledger Live and other crypto/gaming apps. The post notes KPOT has been used in email-based campaigns since 2018 and focuses on harvesting browser data, instant messenger, VPN/RDP/FTP credentials, and cryptocurrency wallets.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.