Skip to content

OtterCookie

Named by 3 kept items in this workspace.

2 items name it under threat actors and 1 under classification.key entities.

Search every workspace for OtterCookie. It matches the name as written, so it can find other things that share it.

The items that name it 3

  • The OpenSourceMalware Show #22
    talkas threat actors2026-09-25

    Malware family cited as one of the two ancestors of WeaselBiscuit; described as consolidating multiple malware families into one, unlike the simpler WeaselBiscuit.

  • WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials
    writeupas threat actors2026-09-17

    DPRK-linked Node.js infostealer delivered via malicious npm packages, using Socket.IO bidirectional C2, with recent variants adding keylogging, clipboard monitoring, and screenshot capture; used as comparison baseline for WeaselBiscuit.

  • The OpenSourceMalware Show #21
    talkas classification.key entities2026-09-17

All threat actors in this workspace.