Crimeware / malware operation
Warlock Stealer
Status: Active
Confidence: Confirmed
A newly advertised malware service operating under the Warlock Portal branding is being promoted as a cross-platform information-stealing and victim-management platform. The offering claims support for both PE and ELF payload generation and advertises 25 collection modules integrated into a centralized searchable logging environment.
Primary motivationFinancial gain
First observed2026-10-04
Aliases
Aliases
WarlockWarlock InsaneWarlock Portal