Icarus a Versatile Infostealer with Rootkit and hVNC Capabilities

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

The Icarus Stealer malware is equipped with a Hidden Virtual network computing (hVNC) feature, which enables the attacker to generate a concealed desktop and traverse the compromised system without any contact with the primary desktop. Furthermore, Icarus Stealer is considerably less expensive than other widely used infostealers available on the dark web.