PyInfo Stealer

Also known as:

What is the PyInfo Stealer infostealer, and what data does it steal?

PyInfo Stealer is a CyStack research label for information-stealer traces. As of 11/10/2026, CyStack's research records 1 variant, with unknown attribution confidence.

Note: This data is provided for reference and cybersecurity research only.
CyStack recommends that users do not use this information for unlawful purposes

Description

Original English

Unidentified Python-based stealer observed inside @BRADMAX aggregator packs under [UN]UNKNOWN_(N) filler folders. The system_info.txt is a flat key/value record followed by two --- ... --- framed sections. Family attribution is provisional; the format has not been mapped to a published threat-intel name.

MITRE ATT&CK technique mapping

T1555Credentials from Password Stores

Data provided by

Accelerate investigation with professional monitoring solutions

Infostealer data represents only a fraction of modern data theft threats. With the Threat Intelligence component in the CyStack VulnScan solution suite, organizations can investigate each threat and credential exposure in depth, mapping C2, IOCs, and other actionable threat intelligence.

Explore Threat Intelligence

PyInfo Stealer

What is the PyInfo Stealer infostealer, and what data does it steal?

Description

MITRE ATT&CK technique mapping

Accelerate investigation with professional monitoring solutions

Variants (1)

Data limited to 5 variants

Common field keys

Sample log format