Netskope Threat Labs

Amatera

ATP Sandbox Adv. Heuristics

Amatera is a stealer written in C++ that performs anti-sandbox checks before enumerating browsers and exfiltrating cryptocurrency files, wallets, and possibly credentials from infected systems.

First seen
July 2025
Last seen
October 2026
AmateraStealerAmaterastealer
Alert Name
Document-HTML.Trojan.AmateraStealer
Document-XML.Trojan.Amaterastealer
Script-PowerShell.Trojan.Amaterastealer
Win32.Spyware.Amaterastealer
Win32.Trojan.Amatera
Win32.Trojan.Amaterastealer