Skip to content
ThreatCluster

Phantom Stealer Malware Delivered via ISO Files in Phishing Campaign

First seen 13 Dec 2025, 11:50 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Seqrite Labs researchers have identified a phishing campaign from Russia that delivers the Phantom Stealer malware through the abuse of ISO mounting on Windows platforms. This method exploits users into executing malicious files hidden within ISO images, targeting Windows systems specifically.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 196d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track Phantom Stealer in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed