Back to ffraud
Threat signatureCriticalMalware
credential_stealer
IPs hosting credential-stealer malware (infostealers) like RedLine, Vidar, Lumma, ACRStealer, or Raccoon. These steal passwords, cookies, and crypto wallets from infected machines.
Related signatures
Check an IP for this and every other signature.
ffraud returns the exact threat tags on any IP, free, no key needed. Or pull the whole labelled dataset from GitHub.