MonsterV2
Aliases: Aurotun Stealer
- First seen
- 2020-09-01 00:00:00
- Malware type
- credential-stealer
- Family
- Malware family
- Last IoC activity
- 2026-07-18 19:26:04
- Profile updated
- 2026-07-07 15:12:24
Targeted industries: financial-services technology-and-telecommunications
Context
MonsterV2, also known as Aurotun Stealer, is a credential-stealing malware. It is designed to extract sensitive information from infected systems, primarily targeting credentials for financial and online accounts.
Detection coverage
- 1 YARA rules
Detection rules
- CAPE_Monsterv2 (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Monsterv2 (report)
- bazaar.abuse.ch — Aurotunstealer (report)
- x.com — 1930733204950184410 (report)
- proofpoint.com — When Monster Bytes Tracking Ta585 And Its Arsenal (report)
- cyber.nj.gov — 214 (report)