Trusted Design

Rombertik

概要

At a high level, Romberik is a complex piece of malware that is designed to hook into the user’s browser to read credentials and other sensitive information for exfiltration to an attacker controlled server, similar to Dyre. However, unlike Dyre which was designed to target banking information, Rombertik collects information from all websites in an indiscriminate manner.

Created: 2026-02-23

Indicators

• FileHash-MD5 - 48da5a2c482c20e6afd47009608dcf2f -
• FileHash-MD5 - 0566f9026654c01e3bbc502c112e40bc -
• FileHash-SHA256 - 0d11a13f54d6003a51b77df355c6aa9b1d9867a5af7661745882b61d9b75bccf -
• FileHash-MD5 - 42ff94a4751ffa9ee2cf40bbe7964e8f -
• URL - www.centozos.org.in/don1/gate.php -
• FileHash-MD5 - d95495728db1d257c78bcc19b43e94ff -
• FileHash-MD5 - f504ef6e9a269e354de802872dc5e209 -
• FileHash-MD5 - d4b0adbe634a78808d2bb8574a8d6b04 -
• FileHash-MD5 - 4d88abe629e51ced10b4a43cc04a1db7 -
• FileHash-MD5 - 56c9bf409f9bf575c89397e5ddbf03ed -
• FileHash-MD5 - 8e5fe70fd7cb9102db35b74ba4d20602 -
• FileHash-MD5 - 3ed336a76f934fc5831cfe348e961e60 -
• hostname - www.centozos.org.in -
• FileHash-MD5 - 2e4969de9333ff579afd02c900c86961 -
• FileHash-MD5 - 38f5191de5b8c266746006e9766b2f9d -
• FileHash-MD5 - c6b19d8587d6e0907a5276a1156a72b0 -
• FileHash-MD5 - 33433a36a3b94296d9cdb2e7fd058e14 -
• FileHash-MD5 - 8e4985c14920e520f4d43e1ef2b0871c -
• FileHash-MD5 - 207417d52d4ad71fa84b2dddba62b1ed -
• FileHash-MD5 - af55c73c6fd997318f2b791df3e10d55 -

類似Pulses

• Dyre: Emerging threat on financial fraud landscape (score: 0.55)
• SWORD (FAMILY) (score: 0.51)
• Analyzing Bartalex – A Prolific Malware Distributor (score: 0.49)
• Psyme malware on Metadefender.com (score: 0.49)
• Zscaler's Spymel - signed malware (score: 0.48)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る