← All malware
CryptBot
A typical infostealer, capable of obtaining credentials for browsers, crypto currency wallets, browser cookies, credit cards, and creates screenshots of the infected system. All stolen data is bundled into a zip-file that is uploaded to the c2.
Last 7 days
Mar 3, 2026
C2 Hosts: 2
| Date | C2 Hosts |
|---|---|
| Mar 3, 2026 | 2 |
Further Reading
Malicious KMSPico installers steal your cryptocurrency wallets
Threat actors are distributing altered KMSpico installers to infect Windows devices with malware that steals cryptocurrency wallets.
bleepingcomputer.com
Revamped CryptBot malware spread by pirated software sites
A new version of the CryptBot info stealer was seen in distribution via multiple websites that offer free downloads of cracks for games and pro-grade software.
bleepingcomputer.com
40,000 CryptBot Downloads per Day
Public source code repository at Bitbucket.org was as abused to host CryptBot, Buer loader with NuclearBot and Cryptominer.
gdatasoftware.com