Skip to content

WarmCookie

Also known as: Badspace, Carrotstick, QUICKBIND

WarmCookie is backdoor that is capable of executing commands reading/writing files and capturing screenshots. It communicates with a command and control (C&C) server via HTTP to receive further instructions and exfiltrate stolen data. It is commonly distributed through phishing campaigns and malicious downloads, targeting unsuspecting users to infiltrate systems undetected.

Last 7 days

May 14, 2026
C2 Hosts: 1

Further Reading