Cybersecuritynews

CharlieKirk Grabber Malware Targets Windows Systems for Credential Theft

First seen 20 Feb 2026, 14:17 UTC • Cyfirma

•50.9

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The CharlieKirk Grabber is a newly identified Python-based infostealer targeting Windows systems. It aims to exfiltrate stored login credentials, browser cookies, and session data by executing quickly and disappearing before detection. Users of Windows systems are at risk of having their sensitive information compromised.

How this analysis works

Timeline

2026-02-20

CharlieKirk Grabber identified targeting Windows systems

2026-02-20

Malware designed to steal login credentials and session data

Attack Flow

9 entities, 7 inferred relationships (STIX 2.1).

Technique (6)

Malware
T1041 - Exfiltration Over C2 Channel
T1053 - Scheduled Task/Job
T1059.001 - PowerShell
T1071 - Application Layer Protocol
T1566 - Phishing

Malware (1)

CharlieKirk Grabber

Affected Platform (1)

Windows

Tool (1)

PowerShell

Relationships

Malware targets Windows
T1041 - Exfiltration Over C2 Channel targets Windows
T1053 - Scheduled Task/Job targets Windows
T1059.001 - PowerShell targets Windows
T1071 - Application Layer Protocol targets Windows
T1566 - Phishing targets Windows
CharlieKirk Grabber related to PowerShell

Continue Reading

Google Addresses Eighth Chrome Zero-Day Vulnerability in 2025 China-linked Cyber Group Expands Targeting to Southeastern Europe China-Nexus APT UAT-7290 Targets South Asia Telecoms in Cyber Espionage Campaign China-linked UAT-7290 Targets Telcos in Cyberespionage Campaign UAT-7290 Cyber Espionage Targets South Asian Telecoms APT28 Exploits MSHTML Zero-Day Vulnerability in Windows

CharlieKirk Grabber Malware Targets Windows Systems for Credential Theft

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading