What Does LilithBot Malware do to Your Computer?

LilithBot is a piece of multi-purpose malware that was recently detailed by a research team with ThreatLabz.

The LilithBot malware has been linked by researchers with the threat actor known as EternityTeam. Eternity in turn has ties to a Russian-speaking threat actor known as Jester Group.

LilithBot is sold using a method that has gained a lot of popularity in recent years, called malware-as-a-service. The hackers use a Telegram channel to sell the LilithBot package.

The LilithBot malware itself combines a rich malicious feature set that includes a miner module, an infostealer, a clipper module and a number of mechanisms to ensure persistence on the compromised device. The LilithBot product even offers a ransomware module among its services.

The LilithBot package is sold for as little as $90 and as much as $470, depending on the set of features the budding hacker wants to use.

The different modules are even explained and have tutorials of sorts on a Tor page set up by the threat actor selling Lilith.