en
WhiteSnake StealerWhiteSnake (also known as WhiteSnake Stealer) is an information-stealing malware family operating under the MaaS model. WhiteSnake targets browser credentials, cryptocurrency wallets, Steam/Telegram/Discord session tokens, 2FA codes and Email and FTP client credentials. As of 11/10/2026, CyStack's research records 1 variant, with high attribution confidence.
Note: This data is provided for reference and cybersecurity research only.
CyStack recommends that users do not use this information for unlawful purposes
Original English
WhiteSnake Stealer logs. Post-2024 builds emit a PC_info.txt
beginning with an emoji-prefixed 🖥Computer info: section and
containing the system, user, and time values together with
later sections covering installed software and network state.
Distributed via Telegram aggregator channels (BRADMAX-style
redistributors) and via a MaaS subscription model.
Infostealer data represents only a fraction of modern data theft threats. With the Threat Intelligence component in the CyStack VulnScan solution suite, organizations can investigate each threat and credential exposure in depth, mapping C2, IOCs, and other actionable threat intelligence.
1 variant recorded for this malware
| ID | Data collected | Confidence |
|---|---|---|
a444692... | 105,983 | High |
To see more variants, organizations should use dedicated solutions such as CyStack Threat Intelligence
🖥Computer info:System: <value>Computer name: <value>User name: <value>System time: <value>CPU: <value>GPU: <value>RAM: <value>HWID: <value> 🛡Security:Installed antivirus: <value>Started as admin: <value> 📡Whois:IP: <value>Country: <value>City: <value>Region: <value>Internet provider: <value>
