Last seven days
- First activity
- Jul 19, 2026
- Last activity
- Jul 19, 2026
- Feed role
- C2
- Host form
- 1 IP / 0 hostnames
C2 tracking
Seven-day C2 activity
Derp observations, rolling seven-day window
1 Jul 19
Observed infrastructure
Leading locations
- LU1
Leading providers
- Ghosty Networks LLC1
Infrastructure traits
- Hosting 1
Samples
Recent associated samples
MITRE ATT&CK
WhiteSnake in ATT&CK
3 distinct techniquesReporting
Research mentioning WhiteSnake
May 6
Dark Reading
Yet Another Way to Bypass Google Chrome's Encryption Protection
The authors of infostealers like Meduza Stealer, Whitesnake, Lumma Stealer, and Lumar have all successfully continued to harvest cookie data and other secrets from Chrome, even after Google implemented ABE.
May 6
Kaspersky
How VoidStealer bypasses Chrome’s protections to hijack sessions and steal data | Kaspersky official blog
Among them were the creators of Meduza Stealer, Whitesnake, Lumma Stealer, and Lumar (also known as PovertyStealer).
May 6
Kaspersky Ru
Как VoidStealer обходит защиту Chrome и ворует сессии и данные | Блог Касперского
Среди них были Meduza Stealer, WhiteSnake, Lumma Stealer и Lumar (он же PovertyStealer).
Feb 2
Spycloud
How Infostealer Malware Bypasses Chrome's App-Bound Encryption
Multiple families have successfully bypassed App-Bound Encryption including Phemedrone, LummaC2, Meduza, Vidar, StealC, Rhadamanthys, WhiteSnake, Meta, and Lumar.
Sep 24
Bleeping Computer
Infostealer malware bypasses Chrome’s new cookie-theft defenses
security researchers g0njxa and also RussianPanda9xx observed multiple infostealer developers boasting that they have implemented a working bypass for their tools (MeduzaStealer, Whitesnake, Lumma Stealer, Lumar (PovertyStealer), Vidar Stealer, StealC).
