HOMETHREATSSocelars
APT / THREAT GROUP

Socelars

2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Socelars is an infostealer with main focus on:

* Facebook Stealer (ads/manager)

* Cookie Stealer | AdsCreditCard {Amazon}

Threat Analysis

Socelars is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.sekoia.io/privateloader-the-loader-of-the-prevalent-ruzki-ppi-service/
→https://info.spamhaus.com/hubfs/Botnet%20Reports/2022%20Q3%20Botnet%20Threat%20Update.pdf
→https://twitter.com/VK_Intel/status/1201584107928653824
→https://www.bleepingcomputer.com/news/security/facebook-ads-manager-targeted-by-new-info-stealing-trojan/
→https://www.trendmicro.com/en_us/research/21/i/fake-installers-drop-malware-and-open-doors-for-opportunistic-attackers.html

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

Socelarswin.socelars

External Intelligence

Malpedia: win.socelars

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Socelars