Skip to content
MalwareWiki

Malware

Azorult

aka PuffStealer · Rultazo

AZORult is a credential and payment card information stealer.

Azorult, also known as PuffStealer, Rultazo, is a Windows malware family operated by The Gorgon Group.

Background

AZORult is an information stealer that harvests credentials and payment card data. Its second version introduced, among other changes, the ability to resolve .bit-domains. Researchers have seen it deployed alongside Chthonic and delivered as a payload by Ramnit.

Source: Malpedia (Fraunhofer FKIE).