Description
DarkCloud is an information stealer sold as malware as a service that targets credentials, browser data, and cryptocurrency wallets on Windows systems. Its operators distribute it through phishing emails with malicious attachments and loaders, and its panels let buyers manage stolen data, which keeps the family in constant circulation among low skill crews.
Stats
- First seen
- June 2023
- Last seen
- October 2026
Also known as
Darkcloud
Alert name variants
| Alert Name |
|---|
| ByteCode-MSIL.Spyware.Darkcloud |
| ByteCode-MSIL.Trojan.Darkcloud |
| ByteCode-MSIL.Trojan.DarkCloud |
| Email-MIME.Trojan.DarkCloud |
| Script-JS.Downloader.DarkCloud |
| Script-JS.Trojan.DarkCloud |
| Script-PowerShell.Trojan.DarkCloud |
| Win32.Exploit.DarkCloud |
| Win32.Ransomware.DarkCloud |
| Win32.Spyware.Darkcloud |