Book of Eli
- First seen
- 2012-01-01 00:00:00
- Malware type
- credential-stealer, keylogger, screen-capture, spyware
- Profile updated
- 2026-07-07 14:50:12
Context
This in .Net written malware is a classic information stealer. It can collect various information and can be depoyed in different configurations: "The full-featured version of the malware can log keystrokes, collect profile files of Mozilla Firefox and Google Chrome browsers, record sound from the microphone, grab desktop screenshots, capture photo from the webcam, and collect information about the version of the operation system and installed anti-virus software." (ESET) This malware has been active since at least 2012.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Bookofeli (report)
- ESET — Libya Malware Analysis (report)