Water Orthrus is a cybercriminal group distributing CopperStealer and CopperPhish malware to steal credit card information from Microsoft 365 users.
Water Orthrus is a cybercriminal group primarily distributing CopperStealer and CopperPhish malware. They target Microsoft 365 users through phishing campaigns to steal credit card information. The group has evolved their malware with rootkits for stealthy installations and shifted focus from personal data to cryptocurrency and credit card theft. Defenders should enhance vigilance against suspicious emails targeting Microsoft 365 accounts and strengthen endpoint monitoring to detect rootkit-based stealth techniques.
Water Orthrus is a threat actor known for distributing CopperStealer and CopperPhish malware. They target Microsoft 365 users with phishing campaigns to steal credit card information. The actor has evolved their malware to include rootkits for stealthy installations and has shifted their focus from personal information to cryptocurrency and credit card data. Water Orthrus has been linked to the Scranos campaign reported in 2019.
Water Orthrus primarily distributes CopperStealer and CopperPhish malware.
They use rootkits for the stealthy installation of their malware.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.