corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0ca8a-5333-7209-877a-828a3e286f63

Sleep with one eye open: how Librarian Ghouls steal data by night

Kaspersky Securelist · published 9 June 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securelist.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
64
Words captured
2,659

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/05/15155659/librarian-ghouls-apt-wakes-up-computers-to-steal-data-and-mine-crypto1.png
media.kasperskycontenthub.com
http://www.blat.net
blat.net
https://securelist.com/tag/xmrig/
securelist.com
https://attack.mitre.org/techniques/T1588/002/
attack.mitre.org
Awaken Likho is awake: new techniques of an APT group Read at the source ↗
securelist.com
http://www.mipko.ru
mipko.ru
Update: WebBrowserPassView v2.18 Read at the source ↗
nirsoft.net
https://www.nirsoft.net/utils/nircmd.html
nirsoft.net
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/05/15160112/librarian-ghouls-apt-wakes-up-computers-to-steal-data-and-mine-crypto2.png
media.kasperskycontenthub.com
https://opentip.kaspersky.com/185.125.51.5/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______d2af87f155401802&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2025/05/15160158/librarian-ghouls-apt-wakes-up-computers-to-steal-data-and-mine-crypto3.png
media.kasperskycontenthub.com
https://www.kaspersky.com/enterprise-security/apt-intelligence-reporting
kaspersky.com
https://opentip.kaspersky.com/d8edd46220059541ff397f74bfd271336dda702c6b1869e8a081c71f595a9e68/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______adf24abdb7a69cab&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/2f3d67740bb7587ff70cc7319e9fe5c517c0e55345bf53e01b3019e415ff098b/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______c31aa7ac989e7898&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/de998bd26ea326e610cc70654499cebfd594cc973438ac421e4c7e1f3b887617/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______53d7424a5af9e34a&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/785a5b92bb8c9dbf52cfda1b28f0ac7db8ead4ec3a37cfd6470605d945ade40e/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______95de702292e293b0&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/c79413ef4088b3a39fe8c7d68d2639cc69f88b10429e59dd0b4177f6b2a92351/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______df9f3be2b3c958a7&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/53fd5984c4f6551b2c1059835ea9ca6d0342d886ba7034835db2a1dd3f8f5b04/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______0f6d37fae23da320&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/f8c80bbecbfb38f252943ee6beec98edc93cd734ec70ccd2565ab1c4db5f072f/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______40f83574833163cc&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/4d590a9640093bbda21597233b400b037278366660ba2c3128795bc85d35be72/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______a2d0c4595d710055&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/1b409644e86559e56add5a65552785750cd36d60745afde448cce7f6f3f09a06/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______93323bdd0967b039&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/7c4a99382dbbd7b5aaa62af0ccff68aecdde2319560bbfdaf76132b0506ab68a/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______4e64991aeba8878c&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/702bf51811281aad78e6ca767586eba4b4c3a43743f8b8e56bb93bc349cb6090/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______65ab69c4dd46117a&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/311ec9208f5fe3f22733fca1e6388ea9c0327be0836c955d2cf6a22317d4bdca/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______68a80358dd3438d0&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/fd58900ea22b38bad2ef3d1b8b74f5c7023b8ca8a5b69f88cfbfe28b2c585baf/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______ca063e9ea0c7b79b&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/e6ea6ce923f2eee0cd56a0874e4a0ca467711b889553259a995df686bd35de86/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______dc894bdb5b36ae4e&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/6954eaed33a9d0cf7e298778ec82d31bfbdf40c813c6ac837352ce676793db74/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______ade297d6bf5d9bda&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/e880a1bb0e7d422b78a54b35b3f53e348ab27425f1c561db120c0411da5c1ce9/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______316a5b901e841028&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/c353a708edfd0f77a486af66e407f7b78583394d7b5f994cd8d2e6e263d25968/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______ef31a49d3ac426cc&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/636d4f1e3dcf0332a815ce3f526a02df3c4ef2890a74521d05d6050917596748/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______c620910155370839&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/c5eeec72b5e6d0e84ff91dfdcbefbbbf441878780f887febb0caf3cbe882ec72/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______b8f025269bbfe5c3&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/8bdb8df5677a11348f5787ece3c7c94824b83ab3f31f40e361e600576909b073/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______b5baf6d6204e4386&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/2af2841bf925ed1875faadcbb0ef316c641e1dcdb61d1fbf80c3443c2fc9454f/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______1c891646239b988f&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/8b6afbf73a9b98eec01d8510815a044cd036743b64fef955385cbca80ae94f15/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______f0757553ed28437a&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/7d6b598eaf19ea8a571b4bd79fd6ff7928388b565d7814b809d2f7fdedc23a0a/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______6232edafc0059ec1&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/01793e6f0d5241b33f07a3f9ad34e40e056a514c5d23e14dc491cee60076dc5a/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______b27707e00ab0dcb6&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/649ee35ad29945e8dd6511192483dddfdfe516a1312de5e0bd17fdd0a258c27f/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______174435c19f87054a&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/9cce3eaae0be9b196017cb6daf49dd56146016f936b66527320f754f179c615f/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______5e709c53f2a3db3f&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/d7bcab5acc8428026e1afd694fb179c5cbb74c5be651cd74e996c2914fb2b839/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______9dd68fb3baf6c4b4&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/vniir.space/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______9502c558d867a8d9&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/vniir.nl/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______0e636fb1549d0169&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/hostingforme.nl/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______e61fe25a8c34d281&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/mail-cheker.nl/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______bcd6467cb60e2786&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/unifikator.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______9d6a78151a150e26&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/outinfo.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______cd610dfe5d103022&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/anyhostings.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______e649e0fff731af9a&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/center-mail.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______5bfd54553a1d0b63&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/redaction-voenmeh.info/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______e9f97862db1b8839&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/acountservices.nl/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______57ad99150fb110a9&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/accouts-verification.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______3d341e06195a1983&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/office-email.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______e5330c8a0b58d099&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/email-office.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______4b0edb6b5072f7d8&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/email-informer.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______6a73727ef10b4d4c&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/office-account.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______024df3af7feb7539&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/deauthorization.online/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______6094f2b128789861&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/anyinfos.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______eb14d281d2bae0d7&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/verifikations.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______94630862f2c5471a&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/claud-mail.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______909f7dce262e65b8&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/users-mail.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______6d4e16f3513ebb6f&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/detectis.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______4907f2ac6deda25b&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/supersuit.site/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______5b184f686761e976&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/downdown.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______a3856fd4c7ccda85&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/dragonfires.ru/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______a8e18d0157e42f0d&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com
https://opentip.kaspersky.com/bmapps.org/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______d0d3426800d0cc6e&utm_source=SL&utm_medium=SL&utm_campaign=SL
opentip.kaspersky.com