Netskope Threat Labs

KatzStealer

ATP Sandbox Adv. Heuristics

KatzStealer (Katz Stealer) is an information stealer delivered through loaders such as PhantomVAI in targeted email campaigns. Reports have documented it operating alongside other stealers and remote access trojans, including DCRat, PureLogs, Remcos, and XWorm.

First seen
May 2025
Last seen
October 2026
Katzstealer
Alert Name
ByteCode-MSIL.Trojan.KatzStealer
Script-JS.Trojan.Katzstealer
Script-PowerShell.Trojan.Katzstealer
Win32.Spyware.Katzstealer
Win32.Spyware.KatzStealer
Win32.Trojan.Katzstealer
Win32.Trojan.KatzStealer
Win64.Spyware.Katzstealer
Win64.Spyware.KatzStealer
Win64.Trojan.KatzStealer