Intrusion PreventionRhadamanthys.Stealer.Botnet
Description
This indicates that a system might be infected by Rhadamanthys Stealer Botnet.
Rhadamanthys Stealer is an infostealer malware that steals password credentials and cryptocurrency wallets.
All botnet signatures from FortiOS 5.6 onwards are under IPS, and have their default action set to "Block".
Affected Products
Any unprotected Windows system is vulnerable.
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems
Recommended Actions
If required, the signature's action can be set to "Block".
Please use Anti-Virus software to scan and clean the infected devices.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 52487 |
| Created | Jan 23, 2023 |
| Updated | Apr 22, 2025 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |
| Profile Type | Malware |