Phantom Stealer Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
8
occurrences
First Seen
December 11, 2025
Last Seen
July 20, 2026

Related Threat Clusters

  • Cruciferra Crypter Service Powers Multiple Cybercrime Campaigns

    Proofpoint has identified a sophisticated crypter service named Cruciferra, first sold in autumn 2025, that is utilized by various cybercriminal groups to cloak malware. The service employs advanced techniques such as…

    8 articles · Updated July 20, 2026
  • Phantom Stealer 3.5 Malware Targets Sensitive User Data

    Phantom Stealer version 3.5 has emerged as a significant threat, capable of stealing sensitive information such as passwords, browser cookies, credit card details, and cryptocurrency wallet data. This malware often…

    2 articles · Updated December 18, 2025
  • Phantom Stealer Malware Delivered via ISO Files in Phishing Campaign

    Seqrite Labs researchers have identified a phishing campaign from Russia that delivers the Phantom Stealer malware through the abuse of ISO mounting on Windows platforms. This method exploits users into executing…

    2 articles · Updated December 13, 2025
  • HP Reports Increase in Polished Fake Updates and Malware Attacks

    HP has identified a rise in cyber attacks that utilize polished fake update screens and staged password prompts to deceive users into installing malware. The Threat Insights Report from HP's Threat Research Team…

    1 article · Updated January 9, 2026
  • Pro-Russian Cyber Attacks Utilizing Malware Tools and Ransomware

    A series of pro-Russian cyber attacks have been executed using various malware tools, including ransomware. Notably, the operation named MoneyMount-ISO has been identified as deploying Phantom Stealer through…

    2 articles · Updated December 21, 2025
  • Animated Lures Used in Cyberattacks to Infect PCs

    Attackers are utilizing professional-looking animations to deceive users into downloading malware. The HP Threat Research report details how these campaigns leverage purchasable malware tools and techniques to evade…

    2 articles · Updated December 11, 2025

Recent Intelligence Reports

  • Unpacking “Cruciferra”: An Analysis of a Sophisticated Crypter Service — Proofpoint · July 20, 2026
  • HP warns of surge in polished fake updates & malware — Securitybrief · January 9, 2026
  • SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 76 — Securityaffairs.Co · December 21, 2025
  • Phantom Stealer Attacking Users to Steal Sensitive Data like Passwords, Browser Cookies, Credit Card Data — Cybersecuritynews · December 18, 2025
  • Phantom Stealer Targeting Users to Steal Sensitive Data — Gbhackers · December 18, 2025
  • Abuse of ISO Mounting to Deliver Phantom Stealer Malware on Windows Platforms — Cyberpress · December 13, 2025
  • Hackers Target Windows Systems Using Phantom Stealer Hidden in ISO Files — Gbhackers · December 13, 2025
  • Malware in Motion: Animated Lures Trick Users into Infecting Their PCs | HP® Official Site — Hp · December 11, 2025

CVSS v3.1 Breakdown