CopperStealer
Aliases: Mingloa
- Malware type
- credential-stealer, downloader
- Family
- Malware family
- Profile updated
- 2026-07-07 13:13:29
Targeted regions: country_code:br country_code:in country_code:id country_code:pk country_code:ph
Context
According to PCRIsk, CopperStealer, also known as Mingloa, is a malicious program designed to steal sensitive/personal information. It also has the capability to cause chain infections (i.e., download/install additional malware). Significant activity of CopperStealer has been observed in Brazil, India, Indonesia, Pakistan, and the Philippines. At the time of research, this malware had been noted being spread via websites offering illegal activation tools ("cracks") for licensed software products.
Reports & references
- Trend Micro — Water Orthrus New Campaigns Deliver Rootkit And Phishing Modules (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Copper Stealer (report)
- Trend Micro — Copperstealer Distributes Malicious Chromium Browser Extension Steal Cryptocurrencies (report)
- proofpoint.com — Now You See It Now You Dont Copperstealer Performs Widespread Theft (report)