HOMETHREATSGlupteba
APT / THREAT GROUP

Glupteba

2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Glupteba is a trojan horse malware that is one of the top ten malware variants of 2021. After infecting a system, the Glupteba malware can be used to deliver additional malware, steal user authentication information, and enroll the infected system in a cryptomining botnet.

Threat Analysis

Glupteba is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→http://resources.infosecinstitute.com/tdss4-part-1/
→https://blog.chainalysis.com/reports/2022-crypto-crime-report-preview-malware/
→https://blog.google/technology/safety-security/new-action-combat-cyber-crime/
→https://blog.google/threat-analysis-group/disrupting-glupteba-operation/
→https://blog.sekoia.io/privateloader-the-loader-of-the-prevalent-ruzki-ppi-service/

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

Gluptebawin.glupteba

External Intelligence

Malpedia: win.glupteba

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Glupteba