Raccoon

Raccoon is a type of malware, specifically an infostealer, used predominantly by the Scattered Spider threat actors to obtain login credentials, browser cookies, and histories. This malicious software, which is sold as Malware-as-a-Service (MaaS) on dark web forums, is both effective and inexpensive, making it a popular choice among cybercriminals. It can infiltrate systems through suspicious downloads, emails, or websites, often unbeknownst to the user. Once inside, it can steal personal information, disrupt operations, or even hold data hostage for ransom. eSentire Threat Intelligence noted this trend in their malware analysis titled "Raccoon Stealer v2.0," published on August 31, 2022. In France, Raccoon has been particularly active and accounts for 59% of all malware detections. Its use has led to significant concerns about phishing schemes, fraudulent ticket sales, and other types of information theft. A notable incident involved an attacker gaining access to settings by infecting an employee's computer with Raccoon Stealer, as reported by cybersecurity firm HudsonRock. This highlights the importance of robust cybersecurity measures to prevent such attacks. To mitigate the risk of a Raccoon Stealer infection, proactive steps should be taken. Cyberint suggests several prevention strategies, including the integration of a quick search tool into the Raccoon Stealer dashboard. If Raccoon Stealer detects certain behaviors, it automatically deletes records associated with those activities and updates the threat actors' dashboard accordingly. More comprehensive information about this malware and how to protect against it is available in a whitepaper titled "Raccoon Stealer Whitepaper" from Bitdefender, which can be downloaded online.