Unverified50% confidenceFactExact time
Information-stealing trojans steal passwords saved in browsers, cookies, cryptocurrency wallet private keys, and session tokens.
1
Sources
50%
Confidence
Long-term
Relevance
9/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSecurity researchers have repeatedly found that popular IDE cracking tools bundle information-stealing trojans (such as RedLine Stealer and Raccoon Stealer) that can extract browser passwords, cryptocurrency wallet private keys, SSH keys, and developer credentials such as AWS Access Keys and GitHub Tokens.74% similarUnverified被窃取的密钥被编码成数组形式伪装成正常数据外泄，可规避基于正则表达式的密钥泄露检测工具如GitHub Secret Scanning或TruffleHog73% similarUnverifiedThe attack was a session hijacking attack (Session Grabber), in which the attacker bypassed password verification and directly took over accounts by stealing browser session cookies.73% similarUnverified信息窃取木马如RedLine、Raccoon、Vidar等收集凭证，并在暗网市场中以日志（logs）形式按条出售72% similarUnverified封装安装包常见的恶意植入手段包括键盘记录器、后台挖矿程序和凭证窃取模块（扫描浏览器Cookie、本地密码管理文件和SSH密钥）72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/905646API
curl https://kongchang.com/api/v1/knowledge/claims/905646MCP
get_claim(id=905646)