misp-galaxy:malpedia="Predator The Thief",type:OSINT,osint:lifetime="perpetual",tlp:white,osint:source-type="blog-post",misp-galaxy:mitre-attack-pattern="Credentials from Web Browsers - T1503",misp-galaxy:mitre-attack-pattern="Exploitation for Credential Access - T1212",misp-galaxy:mitre-attack-pattern="Credentials in Files - T1081",misp-galaxy:mitre-attack-pattern="Credentials in Registry - T1214",misp-galaxy:mitre-attack-pattern="Credential Dumping - T1003"