Torg Grabber: Anatomy of a New Credential Stealer

Torg Grabber is a rapidly evolving, highly modular credential stealer sold as Malware-as-a-Service, featuring advanced anti-analysis, Chrome ABE bypass, and a unique REST API infrastructure, with over 40 distinct operators—many tied to Russian cybercrime via Telegram—leveraging a resilient, rotating C2 network and targeting an unprecedented breadth of browsers, extensions, and digital assets.