Infostealer C/.NET Active since 2016

Formbook3

FormBook .NET 2016 MaaS. Purchase_Order_Form.js. aggregate viewport fake comment. 1888 string 1.9MB max obfuscation.

Threat Profile
Type Infostealer
Programming LanguageC/.NET
C2 ProtocolHTTP/C2 Panel
First Seen2016
Targets Küresel Kurumsal
Purpose / Capabilities
  • Form Grab+Credential
No C2 servers have been identified for this family yet.

Research Reports (1)

Medium

FormBook -- Purchase_Order_Form.js 1.9MB Max Obfuskasyon, aggregate viewport metrics Sahte Yorum | Orta

FormBook 1.9MB Purchase_Order_Form.js satin alma siparisi JS. 1888 string 1.9MB = max obfuskasyon. aggregate viewport metrikleri sahte yorum.

Read Report →