Tag: win64

1 Attack Reports | 0 Vulnerabilities

Attack reports

Vidar v1.5 in Go: same family, new language, heavy sandbox checks

Vidar is a name most infostealer trackers know well -- an Arkei descendant that has been snatching browser credentials and crypto wallets since 2018. It usually ships as a .NET binary or a C++ PE. The v1.5 sample we pulled from Triage on May 13, 2026 is neither. It is a 7 MB Go 1.25.4 native PE wit…
infostealer
botnet
vidar
.net
telegram
crypto
sandbox
steam
2026-05-18
av kill
win64
Published: May 18, 2026
Downloadable IOCs: 4
Click here to see more Attack Reports