Formbook
Form-grabbing stealer
Source Attribution
- Origin
- MITRE
- Source
- Proofpoint
- Verified
- 2026-08-26T16:07:01.550Z
- Confidence
- high
Source: Proofpoint · Verified: 2026-08-26T16:07:01.550Z · Confidence: high
Security Timeline
- discovered Formbook first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
Formbook is a long-running form-grabbing and keylogging stealer delivered by trojanized documents. (attributes recorded from Proofpoint).
Definition
Formbook is a long-running form-grabbing and keylogging stealer delivered by trojanized documents.
Overview
Formbook is a long-running form-grabbing and keylogging stealer delivered by trojanized documents.
Behavior
- Keylogging
- clipboard theft
- distributed widely
First Seen
2016-03
Target
Form-grabbing stealer
Malware Intelligence
Family: Formbook
Techniques: T1185, T1555
Targets: Form-grabbing stealer
Behavior:
- Keylogging
- clipboard theft
- distributed widely
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.