SYMBOLCOMMON_NAMEaka. SYNONYMS
win.deerstealer (Back to overview)

DeerStealer

According to Broadcom, DeerStealer is an information stealer written in Delphi and targeting devices running an windows operating system. The malware has hidden VNC capabilities for stealthy remote desktop control, collecting crypto wallets from USB sticks and over 800 browser extensions. It exfiltrates the stolen data in form of a ZIP archive to a botnet C2 server.

References
2025-12-25 ⋅ abuse.ch ⋅ abuse.ch
MalwareBazaar | DeerStealer
DeerStealer
2025-07-22 ⋅ Cryptika cybersecurity ⋅ Cryptika cybersecurity
DeerStealer Malware Delivered Via Weaponized .LNK Using LOLBin Tools
DeerStealer
2025-06-12 ⋅ eSentire ⋅ eSentire Threat Response Unit (TRU)
Don't Get Caught in the Headlights - DeerStealer Analysis
DeerStealer
2024-07-31 ⋅ Broadcom ⋅ Broadcom
DeerStealer malware spread via fake Google Authenticator websites
DeerStealer
2024-07-30 ⋅ eSentire ⋅ Jérôme Segura
Threat actor impersonates Google via fake ad for Authenticator
DeerStealer

There is no Yara-Signature yet.