Technical Analysis of Bandit Stealer

Key Points

Bandit is a new information stealer that harvests stored credentials from web browsers, FTP clients, email clients, and targets cryptocurrency wallet applications.

The malware sends stolen information to a command and control server via Telegram.

Bandit implements numerous methods to detect and evade virtual machines and malware sandboxes.

Bandit has been marketed and sold as a service on underground criminal forums since April 2023.

The malware is written using the Go programming language, which has become increasingly popular …

analysis applications bandit bandit stealer browsers clients command command and control control credentials cryptocurrency cryptocurrency wallet detect email evade ftp information information stealer key key points machines malware sandboxes server stealer stolen technical technical analysis telegram virtual virtual machines wallet web web browsers