Summarize infostealer families, marketplaces, and campaigns for CTI reporting.
npx skills add https://github.com/Liberty91LTD/cti-skills --skill infostealers
Please help me install this Agent Skill. Skill: infostealers Source: https://github.com/Liberty91LTD/cti-skills/tree/main/skills/infostealers Command: npx skills add https://github.com/Liberty91LTD/cti-skills --skill infostealers
Knowledge cell for infostealers that provides an up-to-date, self-updating knowledge base about infostealer malware, its families, ecosystems, and operational patterns to support threat intelligence analysis and defensive planning.
Query the infostealers knowledge cell to produce a concise briefing on major families, marketplaces, and campaigns for CTI reporting.
High-intent search queries and answers about installing and using this skill.
The infostealer threat landscape is dominated by MaaS ecosystems like RedLine, Lumma, Vidar, StealC, and Rhadamanthys. This knowledge base summarizes their distribution methods, pricing models, data targets, and notable campaigns for CTI reporting.
To gather infostealer threat intelligence, query the knowledge cell to produce concise briefings on major families, marketplaces, and campaigns. It delivers structured insights with references suitable for direct ingestion into dashboards and warning intelligence.
Yes, you can use it for incident response planning. It provides historical context on TTP evolution including delivery, persistence, and data targets, alongside actor profiling and risk assessment data to inform defensive strategies.
Yes, it includes recent law enforcement actions relevant to CTI teams. Tracking these actions alongside threat actors, MaaS models, and distribution channels helps assess the operational status and disruption of infostealer ecosystems.
Infostealer campaigns target credentials and sensitive system data through various distribution channels. The knowledge base tracks these operational patterns, MaaS pricing, and TTP evolution to support actor profiling and executive threat briefings.
CTI teams track MaaS ecosystems to understand how infostealer malware is distributed and monetized. Monitoring major families, marketplaces, and threat actors provides actionable intelligence for risk assessment and proactive defensive planning.
dandyeParse IOC lists, query SIEMs, and enrich matched indicators.
dapperdiversRetrieve threat intelligence data from OpenCTI via GraphQL queries.
hypnguyen1209Dissect malware samples to produce threat intelligence and IOCs.
Liberty91LTDMaintain a living knowledge base of DPRK cyber espionage operations with source references.
