Infostealer VB6 Active since 2021

StormKitty

Same as StormKitty vagan enhancer ToxicEye. 5245693641 bot token sharing. WM_KEYDOWN keylogger. Telegram C2.

Threat Profile
Type Infostealer
Programming LanguageVB6
C2 ProtocolHTTP
First Seen2021
Targets Kuresel
Purpose / Capabilities
  • Browser/Credential Stealer
No C2 servers have been identified for this family yet.

Research Reports (2)

High

StormKitty -- vagan PDB ToxicEye ile Aynı Geliştirici, 5245693641 Bot Token Paylaşımı, WM_KEYDOWN Keylogger | Yüksek

StormKitty ToxicEye ile ayni vagan gelistirici PDB. Bot token 5245693641 AAF7eZrRjdXCkx iki malware ailesinde paylasiliyor. WM_KEYDOWN keylogger hook.

Read Report →
High

StormKitty Stealer -- ReviewandSignImportantDocument.exe, VB6 Tabanli, 248 String | Yuksek

StormKitty VB6 stealer. ReviewandSignImportantDocument.exe. 248 string. Password calma.

Read Report →