GIFTEDCROOK Malware Evolves: From Cookie Monster to Cyber Spy
GIFTEDCROOK has evolved from a basic browser data stealer into a sophisticated intelligence-gathering tool. Now capable of swiping sensitive documents and evading detection, this malware targets Ukrainian governmental and military entities. It’s not just about passwords anymore; it’s cyber espionage with a side of geopolitical intrigue.

Hot Take:
Watch out Ukraine, you’ve got a “GIFTEDCROOK” in your digital neighborhood! This malware has gone from being a petty browser data swiper to an international intelligence agent. Move over 007, GIFTEDCROOK is here to steal the show—and your sensitive documents!
Key Points:
- GIFTEDCROOK has evolved from a simple browser data thief to a sophisticated intelligence-gathering malware.
- Targeted campaigns focus on Ukrainian governmental and military entities, using phishing emails with macro-laced Excel files.
- New features allow the malware to steal a broad range of document types and exfiltrate them to a Telegram channel.
- GIFTEDCROOK cleverly breaks down stolen data into smaller parts to evade detection and bypass network filters.
- Its development coincides with geopolitical tensions, suggesting a strategic aim to collect intelligence relevant to Ukraine and Russia.
Already a member? Log in here