OtterCookie

Internal ID: js.otter_cookie

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family identifying js.otter_cookie. Origin and technical characteristics tracked via Malpedia.

Threat Analysis

OtterCookie is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://any.run/cybersecurity-blog/lazarus-group-attacks-2025/

→https://any.run/cybersecurity-blog/ottercookie-malware-analysis/

→https://blackpointcyber.com/blog/malicious-node-package-deploys-ottercookie/

→https://blog.daviddodda.com/how-i-almost-got-hacked-by-a-job-interview

→https://blog.nviso.eu/2025/11/13/contagious-interview-actors-now-utilize-json-storage-services-for-malware-delivery/

→https://blog.talosintelligence.com/beavertail-and-ottercookie/

→https://gbhackers.com/lazarus-group-malware-with-ottercookie/

→https://gitlab-com.gitlab.io/gl-security/security-tech-notes/threat-intelligence-tech-notes/north-korean-malware-sept-2025/

→https://jp.security.ntt/insights_resources/tech_blog/en-contagious-interview-ottercookie/

→https://jp.security.ntt/insights_resources/tech_blog/en-waterplum-ottercookie/

Quick Facts

TypeMalware Family

Aliases1

Also Known As

js.otter_cookie

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search OtterCookie