TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

SUMMARY :

Insikt Group has discovered two new malware families, TerraStealerV2 and TerraLogger, linked to the financially motivated threat actor Golden Chickens. TerraStealerV2 is designed to steal browser credentials, cryptocurrency wallet data, and browser extension information, while TerraLogger functions as a standalone keylogger. These tools suggest ongoing development aimed at credential theft and keylogging. TerraStealerV2 exfiltrates data to both Telegram and a domain, while TerraLogger lacks exfiltration capabilities. Both malware families appear to be in active development, lacking the sophistication typically associated with mature Golden Chickens tooling. Organizations are advised to implement mitigation strategies to reduce the risk of compromise as these malware families evolve.

OPENCTI LABELS :

keylogger,stealer,credential theft,malware-as-a-service,venomlnk,revc2,terraloader,terrastealerv2,terralogger,browser data


Open in NetmanageIT OpenCTI Public Instance with below link!


Use public read only username and password on login page.

NOTE : Use Public READ only user credentials on login page banner.


TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered