UPAS
Aliases: Rombrast
- Malware type
- credential-stealer, keylogger
- Family
- Malware family
- Profile updated
- 2026-07-07 14:34:12
Context
UPAS, also known as Rombrast, is a credential-stealing malware known for its keylogging capabilities. It has been used in various cyber attacks to capture sensitive information from victims.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Upas_Auto (yara-rule)
Reports & references
- malware.dontneedcoffee.com — Eyeglanceru (report)
- research.checkpoint.com — Deep Dive Upas Kit Vs Kronos (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Upas (report)
- malware.dontneedcoffee.com — Inside Upas Kit1.0.1.1 (report)