TimbreStealer
- First seen
- 2022-06-15 00:00:00
- Malware type
- credential-stealer
- Family
- Malware family
- Last IoC activity
- 2026-06-16 19:25:03
- Profile updated
- 2026-07-07 15:22:51
Targeted industries: financial-services technology-and-telecommunications retail-and-hospitality
Context
TimbreStealer is a credential-stealing malware that targets various industries, primarily aiming to extract sensitive information such as usernames and passwords. It has been observed in multiple attack campaigns but does not show a preference for specific geographic regions.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Timbre Stealer (report)
- Cisco Talos — Timbrestealer Campaign Targets Mexican Users (report)