Last seven days
- First activity
- Aug 19, 2026
- Last activity
- Aug 19, 2026
- Feed role
- C2
- Host form
- 1 IP / 0 hostnames
C2 tracking
Seven-day C2 activity
Derp observations, rolling seven-day window
1 Aug 19
Observed infrastructure
Leading locations
- RU1
Leading providers
- Hosting technology LTD1
Infrastructure traits
- Hosting 1
Samples
Recent associated samples
Reported operators
Threat actors
1 named in public reportingAdopted Taurus Stealer code introduced since mid 2020.
MITRE ATT&CK
Taurus Stealer in ATT&CK
28 distinct techniquesTechniques
28 techniques T1539 Steal Web Session Cookie T1555 Credentials from Password Stores T1041 Exfiltration Over C2 Channel T1560 Archive Collected Data T1012 Query Registry T1083 File and Directory Discovery T1120 Peripheral Device Discovery T1518 Software Discovery T1566 Phishing T1059 Command and Scripting Interpreter T1010 Application Window Discovery T1124 System Time Discovery T1027 Obfuscated Files or Information T1082 System Information Discovery T1016 System Network Configuration Discovery T1497 Virtualization/Sandbox Evasion T1070 Indicator Removal T1071 Application Layer Protocol T1190 Exploit Public-Facing Application T1552 Unsecured Credentials T1497.001 System Checks T1140 Deobfuscate/Decode Files or Information T1053 Scheduled Task/Job T1132 Data Encoding T1005 Data from Local System T1027.007 Dynamic API Resolution T1105 Ingress Tool Transfer T1033 System Owner/User Discovery
