BTCintel
nodeok
mempool78,702 tx
node next1.01 sat/vB
retarget33 blocks
chainmainnet

threat actor

Water Orthrus

unknownentity:threat_actor

Water Orthrus is a threat actor known for distributing CopperStealer and CopperPhish malware. They target Microsoft 365 users with phishing campaigns to steal credit card information. The actor has evolved their malware to include rootkits for stealthy installations and has shifted their focus from personal information to cryptocurrency and credit card data. Water Orthrus has been linked to the Scranos campaign reported in 2019.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id
water-orthrus
kind
threat actor
status
unknown
aliases
—
jurisdictions
—
claims naming it
0 · 0 attributions · 0 relations · 0 events

Identifiers

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.