KPOT Stealer
Info stealer (credentials, cookies, crypto)
Source Attribution
- Origin
- MITRE
- Source
- Proofpoint
- Verified
- 2026-08-26T16:11:50.351Z
- Confidence
- high
Source: Proofpoint · Verified: 2026-08-26T16:11:50.351Z · Confidence: high
Security Timeline
- discovered KPOT Stealer first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
KPOT is an info stealer sold on forums harvesting system, network and application credentials. (attributes recorded from Proofpoint).
Definition
KPOT is an info stealer sold on forums harvesting system, network and application credentials.
Overview
KPOT is an info stealer sold on forums harvesting system, network and application credentials.
Behavior
- Marketed on forums
First Seen
2018-01
Target
Info stealer (credentials, cookies, crypto)
Malware Intelligence
Family: KPOT Stealer
Techniques: T1555, T1213
Targets: Info stealer (credentials, cookies, crypto)
Behavior:
- Marketed on forums
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.