The Patching Friars' AlmanacA calendar of CVE saints
Raccoon StealerHoly card for d-raccoon, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 **** Raccoon Stealer LARVATUS PRODEO
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Circle VI · Banking trojans and infostealers

The Demon Raccoon, Bandit of Passwords

Legend

Sold as a service from 2019, Raccoon Stealer stole passwords, cookies and crypto wallets from millions of victims, with more than 50 million credentials taken. In March 2022 the FBI, with Dutch and Italian authorities, dismantled its infrastructure, and Ukrainian national Mark Sokolovsky was arrested; the Department of Justice announced charges in October 2022. A version 2, however, crawled out of the bin later that same year.

Exorcism

Cast it out by avoiding cracked software and malicious ads. Use a password manager and MFA, and after an infection change credentials at once, before the raccoon resells them.

Technical record

Also known as
Racealer
Circle
Circle VI · Banking trojans and infostealers
First seen
2019
Status
Exorcised (Raccoon infrastructure takedown, 2022-03)

An infostealer sold as malware-as-a-service from 2019, stealing passwords, cookies and crypto wallets from millions of victims. In March 2022 the FBI and Dutch and Italian authorities dismantled its infrastructure, and Ukrainian national Mark Sokolovsky was arrested; the DOJ announced charges in October 2022. A version 2 appeared later in 2022.

Sources: attack.mitre.org · justice.gov · MITRE ATT&CK reference S1148

© The MITRE Corporation. ATT&CK® information is reproduced and distributed with the permission of The MITRE Corporation.

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.