Netskope Threat Labs

RecordBreaker

ATP Sandbox Adv. Heuristics

RecordBreaker (a.k.a. Racoon Stealer 2.0) is a full rewrite of the Racoon Stealer information stealer in C and C plus plus, released after the original family's operations ended. It targets browser credentials, cookies, credit card data, and cryptocurrency wallets, and it ships with a control panel that its buyers operate as a subscription service. The rewrite addressed the original's reliability problems and continued the brand's role as a widely purchased commodity stealer.

First seen
March 2023
Last seen
September 2026
Recordbreaker
Alert Name
ByteCode-MSIL.Trojan.Recordbreaker
Win32.Trojan.Recordbreaker
Win32.Trojan.RecordBreaker