Malware
OkoSpyware
- First Reported
- Jul 15, 2026
- Latest Reported
- Jul 16, 2026
Reported Context (3)
- OkoSpyware: Monitors 100 programs like cryptocurrency wallets and password managers, and uses FFmpeg to record video of their windows and also capture keystrokes. OkoBot Framework Uses 20+ Payloads to Target Credentials and Crypto Wallet Seeds
- OkoSpyware watches for 100-plus executables, Exodus, and 1Password among them. OkoBot Uses In-App Fake Recovery Prompts to Target Ledger and Trezor Users
- #TookPS OkoBot Malware Framework Targets Cryptocurrency Wallets
Malware (7)
MITRE ATT&CK (20)
Vendors (3)
Products (11)
Tools (2)
Industries (1)
Countries (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.