APT / THREAT GROUP

TitanStealer

aliases

Last seen:Mar 17, 2026

Intelligence Profile

The stealer is written in Go and capable of stealing a variety of information from infected Windows machines, including credential data from browsers and crypto wallets, FTP client details, screenshots, system information, and grabbed files.

Threat Analysis

TitanStealer is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.bushidotoken.net/2022/11/detecting-and-fingerprinting.html

→https://denshiyurei.medium.com/silent-echoes-the-hidden-dialogue-among-malware-entities-spotlight-on-amos-infostealer-6d7cd70e3219

→https://github.com/D4NTESCODE/TitanStealerSource

→https://www.uptycs.com/blog/titan-stealer-telegram-malware-campaign

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

win.titan_stealerTitanStealer

External Intelligence

Malpedia: win.titan_stealer

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search TitanStealer