← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
IOC - Malicious trading website drops malware that hands your browser to attackers | Malwarebytes
WHITE celestre 2026-04-23 Modified: 2026-05-23
8
IOCs
LOW VOLUME
Malwarebytes has uncovered a new threat, a data-stealing malware designed to steal personal data and login sessions from computers and mobile devices, and is using a fake trading website to lure people into downloading it.
needle stealertradingclawtradingviewgolanggoogleai tradingpackagetelegramcollectneedleamadeygcleanerdiscordsteam
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Amadey Needle
Indicators of Compromise (8)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 259a4fa3c7d581a92352b8ee7711ab03 MD5 of 95dcac62fc15e99d112d812f7687292e34de0e8e0a39e4f12082f726fa1b50ed 2026-04-23
FileHash-SHA1 dc2e1d7264263fce0f2d4b2b64ee7c837f987e4a SHA1 of 95dcac62fc15e99d112d812f7687292e34de0e8e0a39e4f12082f726fa1b50ed 2026-04-23
FileHash-SHA256 0d10a6472facabf7d7a8cfd2492fc990b890754c3d90888ef9fe5b2d2cca41c0 — 2026-04-23
FileHash-SHA256 95dcac62fc15e99d112d812f7687292e34de0e8e0a39e4f12082f726fa1b50ed — 2026-04-23
domain google-services.cc — 2026-04-23
domain studypages.com — 2026-04-23
domain tradingclaw.chat — 2026-04-23
domain tradingclaw.pro — 2026-04-23
References (1)
↗ https://www.malwarebytes.com/blog/threat-intel/2026/04/malicious-trading-website-drop-malware-that-hands-over-your-browser-to-attackers