07-10-2026
Razor’s Edge: the RedWing stealer is designed to target customers of banks in Russia, Uzbekistan, and Kazakhstan
https://www.f6.ru/blog/redwing-stealer-research/
Report completeness: High
Threats:
Redwing
Radartrevog
Antivm_technique
Antidebugging_technique
Victims:
Banking customers, Payment service customers, Marketplaces, Microfinance organizations
Industry:
Petroleum, Entertainment, Financial, E-commerce
Geo:
Uzbekistan, Russia, Kazakhstan, Russian
TTPs:
Tactics: 2
Technics: 0
ChatGPT TTPs:
do not use without manual checkT1005, T1027, T1027.013, T1036, T1041, T1071.001, T1074, T1090, T1119, T1497, have more...
IOCs:
Hash: 11
File: 8
Domain: 8
Soft:
ndroid ap, Android, Telegram, Minecraft, Roblox, Google Play, Linux
Algorithms:
sha1, sha256, md5, chacha20, base64
Win API:
INIT, IMM32, REG, GET, Z, CALL, COUNT, N, SYNC, SYNC2, have more...
Win Services:
bits