Panda Stealer
- Malware type
- credential-stealer
- Last IoC activity
- 2026-07-13 00:12:38
- Profile updated
- 2026-07-07 14:31:55
Targeted industries: financial-services technology-and-telecommunications
Targeted regions: country_code:us country_code:de country_code:jp country_code:au
Context
According to PCrisk, Panda is the name of a malicious program, which is classified as a stealer. It is a new variant of CollectorStealer. The aim of this malware is to extract and exfiltrate sensitive and personal information from infected devices. Panda primarily targets data relating to cryptocurrency wallets. This piece of malicious software has been observed being actively distributed via spam campaigns - large-scale operations during which thousands of scam emails are sent. The spam mail proliferating Panda stealer heavily targeted users from the United States, Germany, Japan, and Australia. The deceptive email letters concerned business-related topics (e.g., fake product quote requests, etc.). Panda stealer is a dangerous program, and as such - its infections must be removed immediately upon detection.
Reports & references
- threatresearch.ext.hp.com — Javascript Malware Dispensing Rats Into The Wild (report)
- cloudsek.com — Threat Actors Abuse Ai Generated Youtube Videos To Spread Stealer Malware (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Panda Stealer (report)
- Trend Micro — New Panda Stealer Targets Cryptocurrency Wallets (report)