Skip to content
MalwareWiki

Infostealer

Ryuk Stealer

aka Sidoh

Information Stealer that searches for sensitive documents and uploads its results to an FTP server.

Ryuk Stealer, also known as Sidoh, is a Windows infostealer.

Background

An information stealer that hunts for confidential documents and ships its findings to an FTP server, while ignoring files that carry known Ryuk extensions.

Source: Malpedia (Fraunhofer FKIE).