Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

CSBradmaxCategoryStealer

Also known as:BRADMAX 4-category victim folder@BRADLOGS Browsers/Discord/Files/System layout

What is the CSBradmaxCategoryStealer infostealer, and what data does it steal?

CSBradmaxCategoryStealer (also known as BRADMAX 4-category victim folder and @BRADLOGS Browsers/Discord/Files/System layout) is a CyStack research label for information-stealer traces. CSBradmaxCategoryStealer targets browser credentials, Discord session tokens, Desktop / Documents / Downloads files (inside Files/) and Victim system info (inside System/). As of 11/10/2026, CyStack's research records 1 distribution channel, with unknown attribution confidence.

Note: This data is provided for reference and cybersecurity research only.
CyStack recommends that users do not use this information for unlawful purposes

Description

Original English

CSBradmaxCategoryStealer is a CyStack-coined identifier for a BRADMAX-redistributed victim folder that ships the 4-category subdirectory layout (Browsers/Discord/Files/System) at root and no companion system-info file at the root level. Observed inside !! 2025 JULY.part001.rar at [<CC>]@BRADLOGS (BRADMAX) (<NN>)/ victim folders.

The 4-subdir shape is a generic Stealerium-fork categorical layout used by multiple builders. The BRADMAX redistribution strips per-builder branding from the System/ subdirectory contents before repacking, so the underlying family cannot be pinned from the root listing alone. The cred-file selector often picks an unrelated harvested file from inside Files/ (e.g. a victim's pip AUTHORS.txt swept up alongside the real stealer drop) so the folder root alone carries no useful per-victim fields. Family attribution is provisional pending a published threat-intel mapping for this BRADMAX-distributed layout.

Operator panels & distribution channels

1 distinct distribution channel recorded for this malware

Data provided by

Accelerate investigation with professional monitoring solutions

Infostealer data represents only a fraction of modern data theft threats. With the Threat Intelligence component in the CyStack VulnScan solution suite, organizations can investigate each threat and credential exposure in depth, mapping C2, IOCs, and other actionable threat intelligence.

Explore Threat Intelligence

CSBradmaxCategoryStealer Malware Analysis