Raccoon Stealer is a malware-as-a-service infostealer that harvests credentials, cookies, and system information from infected endpoints. It gained notoriety for its polished criminal storefront and aggressive marketing on underground forums. Law enforcement actions have disrupted Raccoon operations at various points, but the stealer model persists through forks and successors.
Raccoon infections contribute to the global stealer log supply chain that feeds credential stuffing, fraud, and ransomware initial access markets. Monitoring for Raccoon-derived exposures helps teams catch compromised employees and contractors early.