APT / THREAT GROUP

FFDroider

aliases

Last seen:Mar 17, 2026

Intelligence Profile

According to PCrisk, FFDroider is a malicious program classified as a stealer. It is designed to extract and exfiltrate sensitive data from infected devices. FFDroider targets popular social media and e-commerce platforms in particular.

Threat Analysis

FFDroider is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://thehackernews.com/2022/04/researchers-warn-of-ffdroider-and.html

→https://www.zscaler.com/blogs/security-research/ffdroider-stealer-targeting-social-media-platform-users

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

win.ffdroiderFFDroider

External Intelligence

Malpedia: win.ffdroider

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search FFDroider