Netskope Threat Labs

QqPass

ATP Sandbox Adv. Heuristics

QqPass refers to detections for malware that steals credentials for the Tencent QQ messaging platform and other Chinese services. It harvests stored passwords and intercepts logins to send the data to its operators, and the family has circulated for many years alongside other China focused password stealing malware.

First seen
May 2022
Last seen
September 2026
QQPass
Alert Name
ByteCode-MSIL.Infostealer.QqPass
Win32.Infostealer.QqPass
Win32.Infostealer.QQPass
Win64.Infostealer.QqPass