Skip to content
MalwareWiki

Infostealer

Gomorrah stealer

Gomorrah is a stealer with no or little obfuscation that appeared around March 2020.

Gomorrah stealer is a Windows infostealer.

Background

Gomorrah is a stealer carrying little to no obfuscation that surfaced around March 2020. Its author, who goes by "th3darkly / lucifer" and is also behind the CosaNostra botnet, sells it for roughly $150 lifetime for v4 (v3 originally cost $400) or $100 monthly. Its core capabilities are theft of passwords and cryptocurrency wallets along with loading tasks and additional payloads.

Source: Malpedia (Fraunhofer FKIE).