Dancing With Shellcodes: Analyzing Rhadamanthys Stealer

Threat Background

Rhadamanthys is a newly emerged Information-Stealer that is written in C++. according to multiple reports[1] the malware has been active since late 2022.
In addition, the malware appears to masquerade itself as legitimate software such as AnyDesk installers[2], and Google Ads[3][13] to get the initial foothold.

As for usage, in the dark web, the malware authors offer various deals for using the malware such as monthly or even lifetime payments.

Also, the authors emphasize the malware’s capabilities …

addition ads anydesk authors dancing dark dark web deals google google ads information lifetime malware malware analysis offer payments reports rhadamanthys software stealer threat web