⌁ CyberSecurityBoardThreat Intel · CVEs · Products

Tag: malware

Malware

OkoBot Malware Framework Overview

OkoBot is a malware framework targeting Windows systems since April 2025, featuring over 20 payloads and implants. It includes the SeedHunter module…

cryptocurrency Framework malware OkoBot
July 15, 2026
Malware

SeedHunter Module for Seed Phrase Theft

SeedHunter is a module of the OkoBot framework that injects into legitimate wallet apps (Trezor Suite, Ledger Wallet, Ledger Live) to display…

cryptocurrency malware phishing seed phrase
July 15, 2026
Malware

TookPS PowerShell Downloader

TookPS is a PowerShell downloader used as the initial payload for OkoBot. It has been active since March 2025, delivered via fake…

downloader malware PowerShell SSH
July 15, 2026
Malware

Rilide Chromium Stealer

Rilide is a Chromium-based information stealer used by Russian-speaking threat actors since April 2023. It is installed as a hidden browser extension…

CHROMIUM malware Rilide Russian-speaking
July 15, 2026
Malware

OkoSpyware Surveillance Module

OkoSpyware is a surveillance module within OkoBot that monitors for over 100 executables (e.g., Exodus, 1Password), records screens to MP4 using FFmpeg,…

keylogger malware OkoSpyware spyware
July 15, 2026
Malware

MC Keylogger Module

MC Keylogger is a module in OkoBot that captures keyboard input, clipboard data, USB device activity, and takes screenshots every five minutes.

clipboard keylogger malware MC Keylogger
July 15, 2026
Malware

GlassWorm Malware

GlassWorm is a malware that uses USB device detection to trigger phishing windows on Windows systems, similar to SeedHunter but with a…

GlassWorm malware phishing USB
July 15, 2026
Malware

Bootkitty: UEFI Bootkit Malware

Bootkitty is a UEFI bootkit that can be deployed by exploiting vulnerable UEFI shim bootloaders to bypass Secure Boot and gain persistent…

bootkit Bootkitty malware Secure Boot
July 14, 2026