Raccoon Stealer is a Malware-as-a-Service infostealer that, while not highly sophisticated, is effective and widely used due to its low cost and efficiency. It checks system locale to avoid CIS targets, hides its C&C via Google Drive, and downloads needed DLLs before exfiltrating data. It steals credentials, autofill data, cookies, credit cards, browsing history, and email logins from Chromium, Mozilla, Internet Explorer, and Outlook, as well as Foxmail and cryptocurrency wallets. It gathers system details, saves stolen data into text files, compiles them into a log.zip, and sends it to its C&C before erasing traces. Despite simple techniques, it poses a severe threat by exposing sensitive assets.

Join for free to read