Polazert

Malware updated 15 days ago (2024-11-29T14:09:14.930Z)
Download STIX
Preview STIX
Polazert, also known as Jupyter Infostealer, SolarMarker, and Yellow Cockatoo, is a sophisticated malware that has been discovered with enhanced stealth capabilities. As reported by The Hacker News on November 7, 2023, this new version of the malware can infiltrate systems without detection, making it a significant threat to data security. It uses manipulated search engine optimization (SEO) tactics and malvertising as initial access vectors, tricking users into downloading it from suspicious websites when they are searching for popular software. The malware is particularly dangerous due to its ability to backdoor machines and harvest a wide range of credential information. This includes the computer name, the user's admin privileges, cookies, web data, browser password manager information, and other sensitive data from victim systems. Notably, it can steal logins for crypto-wallets and remote access apps, posing a serious risk to both personal and financial data. In conclusion, Polazert represents a substantial cybersecurity threat due to its advanced stealth capabilities and extensive data harvesting features. Its strategy of leveraging SEO tactics and malvertising to trick users into downloading it underscores the importance of maintaining robust cybersecurity measures and practices. Users should remain vigilant about their online activities, especially when downloading software from the internet, to protect themselves from such threats.
Description last updated: 2024-01-06T13:41:03.497Z
What's your take? (Question 1 of 1)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Possible Aliases / Cluster overlaps
It's hard to track cluster overlaps and naming conventions between vendors, so here are some possible overlapping names / profiles you also may want to look at. Create a free account to see the source evidence for each alias, and help fix any errors.
Alias DescriptionVotes
Yellow Cockatoo is a possible alias for Polazert. The SolarMarker malware, also known as Yellow Cockatoo, Polazert, and Jupyter Infostealer, has been a persistent threat since its inception in 2020. It has steadily evolved over the years, posing significant risks to sectors such as education, healthcare, and small to medium-sized enterprises (SMEs)
2
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Malware
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the Polazert Malware was read from the documents corpus below. This display is limited to 20 results, create a free account to see more