Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 22:03:59 UTC
Home > List all groups > List all tools > List all groups using tool FireMalv
 Tool: FireMalv
Names FireMalv
Category Malware
Type Credential stealer
Description
A .NET based Firefox credential stealer. This tool copies passwords stored in the Firefox
browser storage.
Information <https://blog.checkpoint.com/wp-content/uploads/2015/11/rocket-kitten-report.pdf>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.firemalv>
Last change to this tool card: 23 April 2020
Download this tool card in JSON format
All groups using tool FireMalv
Changed Name Country Observed
APT groups
  Magic Hound, APT 35, Cobalt Illusion, Charming Kitten 2012-Jun 2025
  Rocket Kitten, Newscaster, NewsBeef 2011-2017  
2 groups listed (2 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=95ad36a4-8692-4caf-aa04-b54ade23326e
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=95ad36a4-8692-4caf-aa04-b54ade23326e
Page 1 of 1