APT / THREAT GROUP

RecordBreaker

aliases

Last seen:Mar 17, 2026

Intelligence Profile

This malware is a successor to Raccoon Stealer (also referred to as Raccoon Stealer 2.0), which is however a full rewrite in C/C++.

Threat Analysis

RecordBreaker is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://any.run/cybersecurity-blog/raccoon-stealer-v2-malware-analysis/

→https://asec.ahnlab.com/en/52072/

→https://blog.cyble.com/2022/11/08/massive-youtube-campaign-targeting-over-100-applications-to-deliver-info-stealer/

→https://cloudsek.com/recordbreaker-the-resurgence-of-raccoon

→https://cocomelonc.github.io/malware/2025/01/19/malware-tricks-44.html

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

win.recordbreakerRecordBreaker

External Intelligence

Malpedia: win.recordbreaker

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search RecordBreaker