BlackGuard
- Malware type
- credential-stealer, spyware
- Family
- Malware family
- Last IoC activity
- 2026-07-22 03:55:48
- Profile updated
- 2026-07-07 14:45:09
Targeted industries: financial-services technology-and-telecommunications retail-and-hospitality
Context
According to Zscaler, BlackGuard has the capability to steal all types of information related to Crypto wallets, VPN, Messengers, FTP credentials, saved browser credentials, and email clients.
Detection coverage
- 2 YARA rules
Detection rules
- BLACKBERRY_Mal_Infostealer_Win32_Blackguard (yara-rule)
- SEKOIA_Infostealer_Win_Blackguard_Mar23 (yara-rule)
Reports & references
- ke-la.com — Information Stealers A New Landscape (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Blackguard (report)
- youtube.com — Watch (report)
- cyberint.com — Blackguard Stealer (report)
- team-cymru.com — Bablosoft Lowering The Barrier Of Entry For Malicious Actors (report)
- medium.com — Rising Stealer In Q1 2022 Blackguard Stealer F516D9F85Ee5 (report)
- techtimes.com — New Password Stealing Malware Hacking Forum Hack Password Stealing Google Chrome Binance Outlook Telegram (report)
- zscaler.com — Analysis Blackguard New Info Stealer Malware Being Sold Russian Hacking (report)
- blog.cyble.com — Dissecting Blackguard Info Stealer (report)
- thehackernews.com — Experts Shed Light On Blackguard (report)
- bleepingcomputer.com — New Blackguard Password Stealing Malware Sold On Hacker Forums (report)
- f5.com — Blackguard Infostealer Malware Dissecting The State Of Exfiltrated Data (report)
- zdnet.com — Meet Blackguard A New Infostealer Peddled On Russian Hacker Forums (report)
- bleepingcomputer.com — New Meta Information Stealer Distributed In Malspam Campaign (report)
- blogs.blackberry.com — Threat Thursday Blackguard Infostealer (report)
- medium.com — The History Of Blackguard Stealer 86207E72Ffb4 (report)