Malware family

OmegaLord

Profile source: Mallory

Observed infrastructure

Last seven days

First activity: Jul 14, 2026
Last activity: Jul 14, 2026
Feed role: Distribution
Host form: 0 IP / 8 hostnames

Leading locations

Leading providers

Cloudflare, Inc.8

Infrastructure traits

Anycast 8
Hosting 8

MITRE ATT&CK

OmegaLord in ATT&CK

5 distinct techniques

Techniques

5 techniques

T1056 Input Capture T1589 Gather Victim Identity Information T1078 Valid Accounts T1566 Phishing T1567.002 Exfiltration to Cloud Storage

Reporting

Research mentioning OmegaLord

Jul 14

ReliaQuest

Threat Spotlight: The Jalisco Toolkit and AI-Powered Phishing Surge

OmegaLord is a newly discovered JavaScript-based credential harvester that goes beyond standard tools by deliberately collecting phone numbers alongside credentials, likely to intercept or hijack MFA.