Last seven days
- First activity
- Aug 11, 2026
- Last activity
- Aug 11, 2026
- Feed role
- C2
- Host form
- 0 IP / 1 hostnames
C2 tracking
Seven-day C2 activity
Derp observations, rolling seven-day window
1 Aug 11
Observed infrastructure
Leading locations
- DE1
Leading providers
- DEDIK SERVICES LIMITED1
Infrastructure traits
- Hosting 1
Samples
Recent associated samples
Reported operators
Threat actors
1 named in public reportingRelated tools tied to the same developer include TheVoidStealer, WallStealer, and Void Miner, suggesting an active and steadily expanding malware portfolio.
MITRE ATT&CK
WallStealer in ATT&CK
14 distinct techniquesTechniques
14 techniques T1113 Screen Capture T1553 Subvert Trust Controls T1106 Native API T1555.003 Credentials from Web Browsers T1583.001 Domains T1567 Exfiltration Over Web Service T1027 Obfuscated Files or Information T1059 Command and Scripting Interpreter T1583.004 Server T1218 System Binary Proxy Execution T1027.002 Software Packing T1140 Deobfuscate/Decode Files or Information T1003 OS Credential Dumping T1055.002 Portable Executable Injection
