s1
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

TF-MAL-js.runster

📛 Threat Title

Malware family: Runster

Category: Runster First seen: Last updated: Source: ThreatFox Malwares

Description

ThreatFox malware family `js.runster`. Printable name: Runster. Aliases: Google Drive Caching.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (1)

Remediations (10)

  • Breaking Down the Most Effective Malware Remediation Processes
    web:blog.rsisecurity.com

    Malware attacks are increasingly common cybersecurity concerns, as threat actors devise new, sophisticated approaches to infiltrate IT systems. As a result, every organization needs an effective malware remediation process to identify and mitigate malware attacks early on. Read on to learn about best practices for your organization. What are the Most Effective Malware Remediation Processes ...

  • cti/runster at main · cert-orangecyberdefense/cti · GitHub
    web:github.com

    Orange Cyberdefense CERT has been tracking a previously unnamed modular stealer-loader framework we call Runster , active since at least November 2025. Two main delivery methods. Two PowerShell modules stealing data. A third, related executable with a DGA component dropping a full-featured DLL. RUNSTER delivery and modular architecture — Orange Cyberdefense RUNSTER refers to the recurring use ...

  • The Most Popular Malware Families - hunt.io
    web:hunt.io

    Discover detailed profiles of malware families, including threat actor data, mitigation strategies, and targeted industries to enhance your defenses.

  • Trending Malware | Mallory
    web:mallory.ai

    Trending malware families ranked by mention velocity across vendor reports, researcher write-ups, and the underground, refreshed across 24 hours, 7 days, and 30 days.

  • Malware Families - Fraunhofer
    web:malpedia.caad.fkie.fraunhofer.de

    This page gives an overview of all malware families that are covered on Malpedia, supplemented with some basic information for each family .

  • How to Remove Malware from Windows: A Step-by-Step Cleanup Guide
    web:malwaretips.com

    Learn how to remove malware from Windows with clear steps for unwanted apps, browser hijackers, Malwarebytes scans, and threats that keep coming back.

  • ChainDrop supply chain compromise: Anatomy of a self-propagating worm
    web:www.microsoft.com

    A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems by republishing malicious updates. This analysis details the attack chain, affected environments, and practical guidance for detection, hunting, and remediation .

  • NeedyMantis: Unpacking a post-compromise malware family used in ...
    web:www.microsoft.com

    Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework used in targeted intrusions that combines custom loaders, encrypted archives, and extensible components to maintain long-term access and support follow-on operations.

  • Mitigating malware and ransomware attacks - The National Cyber Security ...
    web:www.ncsc.gov.uk

    How to defend organisations against malware or ransomware attacks.

  • H1 2026 Malware Vulnerability Trends - recordedfuture.com
    web:www.recordedfuture.com

    RATs led Insikt Group malware reporting, and Recorded Future Malware Intelligence submissions identified AsyncRAT as the top submitted malware family by total unique hashes and command-and-control (C2) configurations. AsyncRAT, Cobalt Strike, XWorm, Stealc, and REMCOS RAT remained in the top ten across H1 2025 and H1 2026.

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.