Netskope Threat Labs

VIPKeylogger

ATP Sandbox Adv. HeuristicsAV

VIPKeylogger is an information stealer distributed through phishing campaigns that impersonate tax authorities, documented by researchers in the wild and through detailed malware analysis.

First seen
January 2025
Last seen
October 2026
VIPKeyLoggerVIPkeyloggerVipkeylogger
Alert Name
ByteCode-MSIL.Trojan.Vipkeylogger
ByteCode-MSIL.Trojan.VIPkeylogger
ByteCode-MSIL.Trojan.VIPKeylogger
ByteCode-MSIL.Trojan.VIPKeyLogger
Gen:Variant.VIPKeylogger.1
Gen:Variant.VIPKeylogger.11
Gen:Variant.VIPKeylogger.20
Gen:Variant.VIPKeylogger.22
Gen:Variant.VIPKeylogger.28
Gen:Variant.VIPKeylogger.3