
| Names | FireMalv | |
| Category | Malware | |
| Type | Credential stealer | |
| Description | A .NET based Firefox credential stealer. This tool copies passwords stored in the Firefox browser storage. | |
| Information | <https://blog.checkpoint.com/wp-content/uploads/2015/11/rocket-kitten-report.pdf> | |
| Malpedia | <https://malpedia.caad.fkie.fraunhofer.de/details/win.firemalv> | |
Last change to this tool card: 23 April 2020
Download this tool card in JSON format
| Changed | Name | Country | Observed | ||
APT groups | |||||
| Magic Hound, APT 35, Cobalt Illusion, Charming Kitten | 2012-Jun 2025 | ![]() | |||
| Rocket Kitten, Newscaster, NewsBeef | 2011-2017 | ||||
2 groups listed (2 APT, 0 other, 0 unknown)
|
Digital Service Security Center Follow us on |
Report incidents |
|
| +66 (0)2-123-1227 | ||
| [email protected] | ||