Spyware.Vidar
ThreatDown is now the name of the Malwarebytes line of business products. References to Malwarebytes below reflect the amazing technology used to first identify the threat.
Short bio
Spyware.Vidar is Malwarebytes’ detection name for an information stealer sold under the name VIDAR Pro Stealer.
Type of infection
Spyware.Vidar is a product that offers threat actors the option to set their preferences for the stolen information. Besides credit card numbers and passwords, Vidar can also scrape an impressive selection of digital wallets. This spyware can be spread using various campaigns. We have noticed it as a payload for the Fallout exploit kit.
Protection
Malwarebytes blocks Spyware.Vidar
Home remediation
You can use the Malwarebytes Anti-Malware Nebula console to scan endpoints.
Nebula endpoint tasks menu
Choose the Scan + Quarantine option. Afterwards you can check the Detections page to see which threats were found. On the Quarantine page you can see which threats were quarantined and restore them if necessary.