{"id":11599,"date":"2025-02-18T11:42:19","date_gmt":"2025-02-18T11:42:19","guid":{"rendered":"\/cybersecurity-blog\/?p=11599"},"modified":"2025-04-17T05:40:56","modified_gmt":"2025-04-17T05:40:56","slug":"zhong-stealer-malware-analysis","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/zhong-stealer-malware-analysis\/","title":{"rendered":"Zhong Stealer Analysis: New Malware Targeting Fintech and Cryptocurrency"},"content":{"rendered":"\n

Editor\u2019s note:<\/em><\/strong> The current article is authored by Mauro Eldritch, offensive security expert and threat intelligence analyst. You can <\/em>find Mauro on X<\/em><\/a>.<\/em> <\/p>\n\n\n\n

From December 20 to 24, 2024, the Quetzal Team identified a phishing campaign targeting the cryptocurrency and fintech sectors. This campaign aimed to distribute a newly discovered stealer malware, which we have named Zhong Stealer, as there were no prior public references to this threat. <\/p>\n\n\n\n

The attackers exploited chat support platforms like Zendesk, posing as customers to trick unsuspecting support agents into downloading the malware. <\/p>\n\n\n\n

In this article, we\u2019ll use ANY.RUN’s real-time malware analysis capabilities<\/a> to cover:<\/p>\n\n\n\n