Skip to content
MalwareWiki

Infostealer

IconicStealer

Follow-up payload in 3CX supply chain incident, which according to Volexity is an infostealer collecting information about the system and browser using an embedded copy of the SQLite3 library.

IconicStealer is a Windows infostealer operated by Lazarus Group.

Background

A second-stage payload in the 3CX supply chain incident. Volexity describes it as an infostealer that gathers system and browser details with the help of a bundled copy of the SQLite3 library.

Source: Malpedia (Fraunhofer FKIE).