Vidar
Named by 7 kept items in this workspace.
4 items name it under threat actors and 3 under classification.key entities.
Search every workspace for Vidar. It matches the name as written, so it can find other things that share it.
The items that name it 7
infostealer malware family; Vidar 2.0 targets Azure credentials
infostealer operated as Malware as a Service, Go binary sample with C2 107.189.18[.]7
Infostealer identified among the 14 confirmed malware files in threat actor-controlled repositories; a variant loader distinct from the byte-identical Loader.exe was associated with Vidar.
Information stealer payload (cloudvideo.exe) that retrieves dynamic C2 information from Telegram and Steam user profiles
All threat actors in this workspace.