Related tools tied to the same developer include TheVoidStealer, WallStealer, and Void Miner, suggesting an active and steadily expanding malware portfolio.
Reported operators
Threat actors
1 named in public reportingMITRE ATT&CK
WallStealer in ATT&CK
14 distinct techniquesTechniques
14 techniques T1113 Screen Capture T1553 Subvert Trust Controls T1106 Native API T1555.003 Credentials from Web Browsers T1583.001 Domains T1567 Exfiltration Over Web Service T1027 Obfuscated Files or Information T1059 Command and Scripting Interpreter T1583.004 Server T1218 System Binary Proxy Execution T1027.002 Software Packing T1140 Deobfuscate/Decode Files or Information T1003 OS Credential Dumping T1055.002 Portable Executable Injection