OkoBot is a malware framework targeting Windows systems since April 2025, featuring over 20 payloads and implants. It includes the SeedHunter module for stealing cryptocurrency recovery phrases from Ledger and Trezor wallets, and surveillance tools like OkoSpyware and MC Keylogger.