en
russia34Private Russia 34CSRussia34Stealer (also known as russia34 and Private Russia 34) is an aggregate profile of information-stealer traces. As of 11/10/2026, CyStack's research records 13 variants distributed through 1 channel, with unknown attribution confidence.
Note: This data is provided for reference and cybersecurity research only.
CyStack recommends that users do not use this information for unlawful purposes
Original English
CSRussia34Stealer is a CyStack-coined identifier for a
russia34.com / Private Russia 34 stripped Redline-shape
UserInformation.txt observed inside
@ft7links-redline-<TS>-<COUNT>pcs.rar aggregator packs in
@ft7links_redline_<NN>_bogonip_<HWIDPFX>/ victim folders.
The panel emits an ASCII-art REDLINE banner with three
repeated https://russia34.com subscriber lines, then a
stripped Redline-shape field set.
1 distinct distribution channel recorded for this malware
| Panel name | Distribution channel | Confidence |
|---|
Infostealer data represents only a fraction of modern data theft threats. With the Threat Intelligence component in the CyStack VulnScan solution suite, organizations can investigate each threat and credential exposure in depth, mapping C2, IOCs, and other actionable threat intelligence.
| ru******** | Website | High |
The data in this table is for reference only and is compiled by CyStack researchers. To investigate and scope an incident in detail, organizations should use dedicated solutions such as CyStack Threat Intelligence
13 variants recorded for this malware
| ID | Data collected | Confidence |
|---|---|---|
0bc8a9a... | 1 | Medium |
3f43251... | 1 | Unknown |
46e4e13... | 1 | Medium |
5ce175a... | 1 | High |
7c6a5d9... | 1 | Unknown |
To see more variants, organizations should use dedicated solutions such as CyStack Threat Intelligence
* New subscribers here: <value> Build Date: <value>Configuration: <value>Path: <value>Elevated: <value>Computer Name: <value>User Name: <value>User Language: <value>Netbios: <value>Antivirus: <value>HWID: <value>Processor: <value>Processor Threads: <value>Processor Cores: <value>Graphics Card:Installed RAM: <value>Display Resolution: <value> IP Address: <value>Time: <value>Country: <value>User: <value>
