WarmCookie
Also known as: Badspace, Carrotstick, QUICKBIND
WarmCookie is backdoor that is capable of executing commands reading/writing files and capturing screenshots. It communicates with a command and control (C&C) server via HTTP to receive further instructions and exfiltrate stolen data. It is commonly distributed through phishing campaigns and malicious downloads, targeting unsuspecting users to infiltrate systems undetected.
Last 7 days
May 14, 2026
C2 Hosts: 1
| Date | C2 Hosts |
|---|---|
| May 14, 2026 | 1 |