Snake Keylogger in Geopolitical Affairs: Abuse of Trusted Java Utilities in Cybercrime Operations
Essential information
- Published
- 30/06/2025 16:30
- Modified
- 30/06/2025 16:39
- Tags
- 2025-06-30 credential-stealer infostealer keylogger maas malware-as-a-service phishing russia snake keylogger spearphishing
- Related entities
- 34 observables, 1 intrusion sets (apt), 5 techniques (mitre), 1 malware, 4 others
Description
The S2 Group’s intelligence team has identified through adversary tracking a new phishing campaign by Snake Keylogger, a Russian origin stealer programmed in .NET, targeting various types of victims, such as companies, governments or individuals. The campaign has been identified as using spearphishing emails offering oil products.