Malware-as-a-Service: Redline Stealer Variants Demonstrate a Low-Barrier-to-Entry Threat

Multiple New Campaigns in 2023 Demonstrate The Malware Family Has Been Redeveloped to Remain a Popular And Prominent Threat

EclecticIQ analysts observe the malware family targeting financial information to be used for immediate gain as well as reconnaissance functions to perform initial information gathering and establish persistence. RedLine stealer is almost always accompanied by other malware; either preceded by a loader to install it or succeeded by further malware. 

In the last major iteration of RedLine stealer in 2022, variants …

analysts as-a-service campaigns eclecticiq entry family financial functions gathering information information gathering low malware malware analysis malware-as-a-service persistence popular reconnaissance redline redline stealer service stealer targeting threat