Skip to content
MalwareWiki

Infostealer

TerraStealer

aka StealerOne · SONE · Taurus Loader Stealer Module

According to QuoINT, TerraStealer (also known as SONE or StealerOne) is a generic reconnaissance tool, targeting for example email clients, web browsers, and file transfer utilities.

TerraStealer, also known as StealerOne, SONE, Taurus Loader Stealer Module, is a Windows infostealer operated by VENOM SPIDER and FIN6.

Background

QuoINT describes TerraStealer (also called SONE or StealerOne) as a general-purpose reconnaissance tool that goes after targets such as email clients, web browsers, and file transfer applications. It is attributed to Golden Chickens.

Source: Malpedia (Fraunhofer FKIE).