en
EnchantCloudNew@ft7links Redline variantCSEnchantCloudStealer (also known as EnchantCloudNew and @ft7links Redline variant) is a variant of an information-stealing malware family. As of 11/10/2026, CyStack's research records 1 distribution channel, with high attribution confidence.
Note: This data is provided for reference and cybersecurity research only.
CyStack recommends that users do not use this information for unlawful purposes
Original English
CSEnchantCloudStealer is a CyStack-coined identifier for a
@ft7links / EnchantCloudNew stripped Redline-shape
UserInformation.txt distributed via the
t.me/EnchantCloudNew Telegram channel. The panel emits a
JOIN OUR CHANNEL! pipe-bordered banner with five
channel-promotion lines, then drops two distinct field-set
shapes: a bogon-IP variant with canonical Redline-named fields
and a non-bogon variant with extended-block fields.
1 distinct distribution channel recorded for this malware
| Panel name | Distribution channel | Confidence |
|---|
Infostealer data represents only a fraction of modern data theft threats. With the Threat Intelligence component in the CyStack VulnScan solution suite, organizations can investigate each threat and credential exposure in depth, mapping C2, IOCs, and other actionable threat intelligence.
| — | Telegram | High |
The data in this table is for reference only and is compiled by CyStack researchers. To investigate and scope an incident in detail, organizations should use dedicated solutions such as CyStack Threat Intelligence
