Phoenix Keylogger
- First seen
- 2019-02-01 00:00:00
- Malware type
- keylogger, credential-stealer
- Family
- Malware family
- Related IoCs
- 2 (2 malicious)
- Last IoC activity
- 2026-10-04 21:10:28
- Profile updated
- 2026-07-07 14:42:01
Targeted industries: financial-services healthcare-and-pharmaceutical technology-and-telecommunications
Context
Phoenix Keylogger is a keylogger and information stealer that targets sensitive information, including credentials, from infected systems. It is known to affect various industries, leveraging its functionality to extract valuable data for malicious use.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Phoenix Keylogger (report)
- cybereason.com — Phoenix The Tale Of The Resurrected Alpha Keylogger (report)
- blog.sekoia.io — Privateloader The Loader Of The Prevalent Ruzki Ppi Service (report)
- threatresearch.ext.hp.com — The Many Skins Of Snake Keylogger (report)
- news.sophos.com — Cookie Stealing The New Perimeter Bypass (report)