Socelars

Internal ID: win.socelars

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Socelars is an infostealer with main focus on:

* Facebook Stealer (ads/manager)

* Cookie Stealer | AdsCreditCard {Amazon}

Threat Analysis

Socelars is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://blog.sekoia.io/privateloader-the-loader-of-the-prevalent-ruzki-ppi-service/

→https://info.spamhaus.com/hubfs/Botnet%20Reports/2022%20Q3%20Botnet%20Threat%20Update.pdf

→https://twitter.com/VK_Intel/status/1201584107928653824

→https://www.bleepingcomputer.com/news/security/facebook-ads-manager-targeted-by-new-info-stealing-trojan/

→https://www.trendmicro.com/en_us/research/21/i/fake-installers-drop-malware-and-open-doors-for-opportunistic-attackers.html

→https://www.welivesecurity.com/wp-content/uploads/2020/07/ESET_Threat_Report_Q22020.pdf

Quick Facts

TypeMalware Family

Aliases1

Also Known As

win.socelars

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Socelars